Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer
File: nQcEH-VVkeTiI2pA9DkA7ybvBF4.cer (raw, json)
Hash identifier: dqWZWZh2ldbBLPF2VgR3S4Pk2rZjWIxb562BT8G2xNs=
Subject key identifier: 9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258E313233889F33CA87164FC2604028
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2248::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:31:32:33:88:9f:33:ca:87:16:4f:c2:60:40:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d07041fe55591e4e2236a40f43900ef26ef045e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:61:d8:e3:6c:11:4e:51:bb:25:2a:9e:59:
4f:5e:d3:0b:24:61:c2:6a:26:dd:d6:7e:3c:f0:96:
6d:e2:db:98:ee:0b:2d:b9:1c:3c:9f:d8:dd:fa:53:
36:c6:c1:46:17:71:f9:31:d2:75:f2:0b:79:61:1a:
48:cf:35:94:7c:6c:0f:14:6e:05:03:72:64:f0:80:
fb:f5:cc:ba:bb:32:94:cb:9b:60:d6:e0:02:bf:47:
75:4a:08:e8:2c:92:3f:dc:1d:84:78:e2:78:13:4f:
4b:2b:4b:54:5a:80:38:07:a5:63:77:af:64:ef:2d:
72:73:0e:aa:8b:8a:27:e9:c3:c8:cc:cc:3c:21:91:
e5:5c:b4:64:9a:eb:9f:28:5b:b1:42:3c:7d:82:f4:
ca:21:8a:60:42:a9:90:a4:ce:fc:db:9e:45:0a:5e:
24:d0:a6:f0:17:de:05:33:d3:f2:cc:8d:d6:1e:61:
5d:d4:6a:c5:28:2e:86:cc:79:44:ac:d3:b6:b6:b8:
80:64:df:4c:5c:dd:2a:84:9e:3c:41:7f:d5:7a:f4:
aa:bf:82:99:72:44:80:bf:6e:83:e1:9a:6f:d3:da:
3e:0f:16:73:62:cc:78:44:e7:d4:06:35:28:11:39:
ad:2d:d1:69:9f:e1:97:2e:4b:d6:c8:ec:e7:05:ad:
8b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:07:04:1F:E5:55:91:E4:E2:23:6A:40:F4:39:00:EF:26:EF:04:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1356a8-891c-4ee1-b6d9-74746989ac92/1/nQcEH-VVkeTiI2pA9DkA7ybvBF4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2248::/48
Signature Algorithm: sha256WithRSAEncryption
a3:21:4f:80:77:f6:92:a4:45:b3:eb:5e:c6:5f:f2:a1:41:c0:
4b:14:6d:82:2d:9f:a7:a7:22:77:5c:24:a9:a7:fe:fd:07:57:
04:29:d4:24:f4:ab:a5:30:2e:84:6c:be:46:54:cd:41:ec:ae:
9e:a5:58:c1:c3:2f:8b:01:a6:f6:b3:3e:94:73:60:d1:91:41:
39:53:96:db:f7:a5:c3:e3:d4:28:a7:d7:de:eb:7f:81:36:b4:
27:00:a8:5f:2f:e9:6e:3b:91:fe:53:d3:b5:1c:8f:11:47:2c:
f1:30:c5:8f:ef:5c:e6:b6:eb:0a:de:b4:93:34:c9:b6:74:91:
5a:77:aa:03:10:34:87:5c:8e:70:4f:a8:ca:4b:b0:df:df:97:
6e:ec:43:da:e8:92:9d:dd:2f:3b:28:c5:26:d3:73:f5:85:7f:
6c:cd:31:0e:69:f6:01:62:3f:50:bd:37:06:a4:97:8b:60:ef:
67:f6:d3:7d:47:1e:43:34:0d:21:3d:ce:a8:8f:47:d7:51:c9:
05:8c:8a:b6:5e:8d:28:48:4c:4c:74:c7:6b:8e:2a:a8:ae:a7:
3d:12:6e:75:fc:f5:52:07:1c:8d:f1:d5:03:50:10:0b:0e:d0:
4a:ab:bd:17:4f:f0:87:e5:c4:15:01:6c:c2:2f:c4:5d:45:85:
b5:18:ee:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:33 2025 by rpki-client