Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer (raw, json)
Hash identifier: Yc0Qi5n1tNwOy/ojvHGHK8M7n5LwPQvJ34nwY3w/Dls=
Subject key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D86DD3729E2A4C780E744B8D070FB1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.134.224.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:6d:d3:72:9e:2a:4c:78:0e:74:4b:8d:07:0f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:e9:fe:b7:df:50:6e:26:78:81:6e:a9:da:
a1:1f:79:be:ff:fa:69:c4:21:10:ad:89:9e:cd:71:
b6:dd:18:a1:28:d8:64:b2:97:02:17:6e:df:58:51:
1b:b9:f4:3b:8a:29:e3:6e:47:6d:47:95:1a:48:b3:
76:cc:fd:c1:51:f1:a2:a0:74:90:50:82:3e:52:c3:
92:8f:22:0b:2b:e8:52:b8:d9:89:fa:52:79:e1:1b:
d2:92:23:ab:9e:5e:69:21:92:10:f6:2c:13:93:54:
20:17:a8:00:47:f1:fc:c7:e3:49:c2:ab:39:fc:f8:
55:b0:54:17:c3:38:9f:1f:64:e8:c3:00:a3:9c:fa:
da:15:35:13:66:d2:cd:7a:45:85:70:c3:22:65:13:
f1:ca:f4:a7:2c:c0:7a:59:58:a6:6c:84:ac:3f:8a:
5f:0d:f2:35:30:ba:f6:4d:a6:0f:f4:e1:97:49:83:
77:a0:f0:90:cc:4f:07:8e:b5:5a:1f:05:30:f6:de:
03:44:4b:7f:1e:db:2b:be:f3:77:b3:a5:5d:1f:8a:
d3:f9:bd:80:f7:eb:9e:bb:82:43:ab:31:df:26:d7:
fd:1a:36:7a:a1:35:64:c5:87:32:09:f2:e3:b5:84:
e6:92:b7:f7:49:97:d9:82:8b:85:d3:11:a9:49:24:
5d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.134.224.0/19
Signature Algorithm: sha256WithRSAEncryption
5b:35:b6:6e:42:3d:ac:bf:87:6d:2a:e2:fa:c7:e8:8b:46:90:
20:13:bf:d7:f6:24:54:96:f6:48:3d:53:04:76:18:e2:19:40:
48:38:ee:af:fd:cd:91:77:e3:dc:05:95:a4:cb:35:7f:27:ad:
1e:2d:54:0a:21:fe:90:a5:5a:43:5e:d3:27:43:7a:81:4f:5b:
00:92:be:db:7c:73:5c:8f:2a:a7:57:b3:ae:6d:49:dc:b3:2b:
85:e4:72:10:c3:ff:95:3f:62:48:6a:30:4a:8d:c8:8a:eb:09:
0a:d3:a3:db:b8:36:05:a2:4a:3b:f4:34:0d:d1:36:de:92:29:
46:a6:81:a9:ba:a7:bb:cc:c0:a0:18:20:4e:4d:ac:0d:20:b1:
01:cd:1c:ad:2a:c5:e8:ed:8d:8e:0b:7c:b8:06:18:50:5f:fc:
af:88:bb:5d:70:78:2f:81:43:ea:ac:fa:25:9c:6c:88:ec:9a:
64:e5:da:f1:ff:be:70:32:51:bb:36:b3:a4:7b:d6:70:14:d4:
b5:4a:ab:f9:e3:55:91:68:a7:06:21:c1:b0:c2:af:00:b2:8e:
5f:a7:ff:9d:af:d9:19:96:4c:2c:da:71:cc:87:f6:bb:a7:70:
76:22:52:56:8c:7e:73:68:ce:4f:d4:df:ff:27:ec:c7:87:31:
5a:ab:6d:b1
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQm2G3Tcp4qTHgOdEuNBw+xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YzQwZTMwN2QxMmNlMDU2OGMyOTllMTdjZDY1YTY2YjI2Y2RiMDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHDp/rffUG4meIFuqdqhH3m+//pp
xCEQrYmezXG23RihKNhkspcCF27fWFEbufQ7iinjbkdtR5UaSLN2zP3BUfGioHSQ
UII+UsOSjyILK+hSuNmJ+lJ54RvSkiOrnl5pIZIQ9iwTk1QgF6gAR/H8x+NJwqs5
/PhVsFQXwzifH2TowwCjnPraFTUTZtLNekWFcMMiZRPxyvSnLMB6WVimbISsP4pf
DfI1MLr2TaYP9OGXSYN3oPCQzE8HjrVaHwUw9t4DREt/HtsrvvN3s6VdH4rT+b2A
9+ueu4JDqzHfJtf9GjZ6oTVkxYcyCfLjtYTmkrf3SZfZgouF0xGpSSRd0QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJxA4wfRLOBWjCmeF81lpmsmzbBNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyL2ZhZjJh
ZS02YTgzLTQ0NWItOTc0Yi04ZmIzNzc5Yjg3MDQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvZmFmMmFl
LTZhODMtNDQ1Yi05NzRiLThmYjM3NzliODcwNC8xL25FRGpCOUVzNEZhTUtaNFh6
V1dtYXliTnNFMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQFw4bgMA0GCSqGSIb3DQEBCwUAA4IBAQBbNbZu
Qj2sv4dtKuL6x+iLRpAgE7/X9iRUlvZIPVMEdhjiGUBIOO6v/c2Rd+PcBZWkyzV/
J60eLVQKIf6QpVpDXtMnQ3qBT1sAkr7bfHNcjyqnV7OubUncsyuF5HIQw/+VP2JI
ajBKjciK6wkK06PbuDYFoko79DQN0TbekilGpoGpuqe7zMCgGCBOTawNILEBzRyt
KsXo7Y2OC3y4BhhQX/yviLtdcHgvgUPqrPolnGyI7Jpk5drx/75wMlG7NrOke9Zw
FNS1Sqv541WRaKcGIcGwwq8Aso5fp/+dr9kZlkws2nHMh/a7p3B2IlJWjH5zaM5P
1N//J+zHhzFaq22x
-----END CERTIFICATE-----
Generated at Sat Apr 19 06:51:18 2025 by rpki-client