Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer
File: qbeSQ_2_ezZcHbwjyQqLzLPDl1E.cer (raw, json)
Hash identifier: aPMWY3hnY+E24JIPVmbcgNB+Feqc2r17BfIJYSm5O7Y=
Subject key identifier: A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427481A009FBB59F199DC04C4D8BF83AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 78.31.8.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1a:00:9f:bb:59:f1:99:dc:04:c4:d8:bf:83:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9b79243fdbf7b365c1dbc23c90a8bccb3c39751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:ca:40:35:fc:d6:2a:ef:3f:88:e9:69:72:
db:a3:84:58:d0:78:04:54:2b:6c:86:20:f5:0b:fa:
bb:f4:4d:72:96:14:bc:78:fe:7a:82:f8:06:90:63:
36:6f:c9:70:d9:25:24:a2:20:fc:7f:60:57:b9:a3:
4a:ac:00:06:35:ad:c2:5c:d4:93:49:c2:0d:5e:5a:
10:d6:be:a1:43:1f:07:24:37:93:18:6d:d9:29:db:
74:4b:ec:c6:d0:db:b5:1a:0d:a9:62:b9:a7:73:d6:
d5:77:b2:d6:0b:72:9f:e9:86:8c:cf:40:e5:96:ad:
56:b0:bc:c2:0c:d4:5a:64:20:3d:56:2f:5c:aa:3f:
9e:f9:07:b4:13:70:55:a6:ac:d7:f8:67:f5:d0:e3:
11:f9:88:b0:28:79:9b:d2:e3:77:b1:43:35:25:8c:
25:d1:f9:a6:86:2d:77:40:eb:b6:d7:ca:4b:c4:21:
ef:96:98:df:79:a6:80:f9:f7:24:7c:08:9f:e2:9f:
67:f3:5d:1a:d3:15:3d:2a:57:1a:11:31:cc:ae:5c:
42:35:4f:06:1f:ba:84:81:3a:d6:e6:76:d2:2c:88:
a8:ba:d7:59:e0:29:c8:65:58:98:03:e2:b3:73:0d:
0d:63:9a:4d:e6:12:7c:5f:f6:de:c0:ec:b3:70:89:
6e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B7:92:43:FD:BF:7B:36:5C:1D:BC:23:C9:0A:8B:CC:B3:C3:97:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6a6842-cb3f-4fb1-9069-78611ec94b44/1/qbeSQ_2_ezZcHbwjyQqLzLPDl1E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.8.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:dc:68:32:99:7d:38:1a:89:a8:58:ec:27:a6:53:8f:c8:33:
55:dc:c9:36:ff:e1:bf:83:b7:50:e7:a4:a9:48:d4:1c:9f:8b:
4d:c6:3b:10:e1:95:28:5d:4c:ba:fd:86:d3:62:d0:f8:f6:f3:
8c:48:46:d1:5a:13:dc:f3:cf:e4:61:9c:16:6b:63:2a:a3:ef:
b9:67:e6:2b:12:57:89:36:a3:ff:0c:e4:fe:f6:52:f7:a7:27:
c7:3c:fa:ad:6f:04:0b:ef:37:b7:d6:16:dd:b1:9f:a9:a6:24:
1c:41:90:7e:b4:6b:8b:a1:93:c7:80:34:42:9c:84:8e:ad:06:
34:2a:5b:b8:0d:a7:59:11:78:d4:3b:34:1b:93:9a:5f:c1:87:
cf:c3:98:0f:81:09:58:75:c6:63:1f:cf:14:31:25:63:65:db:
92:d6:6c:bc:33:aa:10:7c:c4:05:12:be:dc:5a:6b:8b:9f:5e:
5c:fe:49:fe:1c:39:37:27:78:58:a1:ae:dc:60:96:0f:82:b8:
68:e8:96:bd:0c:b8:03:1c:2c:4b:e6:73:16:a4:41:32:48:f4:
46:9a:83:79:06:8d:90:22:88:d1:6c:e7:60:33:5d:4f:02:b5:
b6:74:5e:50:6b:23:45:c2:44:e6:4f:7c:bf:20:3e:21:89:a4:
a9:dc:0d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:56 2025 by rpki-client