Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
File: rONjRGSGG9S_jFvH48m_09JGpN0.cer (raw, json)
Hash identifier: VC9SGQs5uoisa60HBf3SezbVVwWhL9PK2OCp0KaKsUc=
Subject key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5AB8639085E3177225328B1D33967
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.248.87.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ab:86:39:08:5e:31:77:22:53:28:b1:d3:39:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3f:f8:7d:54:eb:ca:80:2e:85:d1:2f:2e:43:
0d:d0:f0:d0:2a:eb:ce:ec:67:7e:c8:6b:04:e2:bc:
9b:c9:28:ef:ab:a2:c9:44:7c:be:bf:d9:67:ec:2d:
07:44:66:a1:1c:a0:a1:02:1a:a2:b4:95:aa:ff:96:
f7:ad:e9:10:46:e8:38:7a:30:5c:4c:3d:7f:24:82:
93:b4:ed:d4:b8:76:df:4f:50:b5:79:a6:04:f0:e3:
ae:16:ea:54:5b:17:ff:14:56:8d:f4:7e:02:fc:54:
0d:b2:47:1b:d1:6a:a5:08:04:ce:86:d6:bf:df:84:
35:a2:d4:52:c5:f9:9c:3a:19:2a:b5:53:14:9a:44:
ee:75:30:ee:b1:64:17:87:b6:2d:f1:57:df:2a:94:
78:96:e0:65:8d:56:38:6d:29:43:dd:18:b8:68:8b:
37:e1:d9:42:2f:86:5e:78:0c:84:06:0a:3b:17:c6:
76:32:21:37:21:41:48:28:b6:74:a0:c0:d8:74:c9:
bf:6c:8a:8b:bd:92:5c:51:e1:d4:c6:12:3b:63:6d:
e4:fc:ee:33:e3:dd:c5:11:74:2d:9f:87:f9:07:62:
dc:71:aa:93:ab:f0:7b:80:15:7c:12:9c:1c:c9:59:
d3:dc:7e:d2:34:19:d3:55:0b:27:b5:3a:23:74:19:
4f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.248.87.0/24
Signature Algorithm: sha256WithRSAEncryption
52:c3:10:da:76:de:3c:f2:1b:ff:30:76:25:66:20:f9:93:cb:
79:6f:bf:a6:1a:dc:20:b5:f4:50:3a:d5:83:d2:b9:18:48:c8:
73:6e:b8:5f:e1:c5:ff:5d:4f:46:b9:f4:12:de:cc:53:bc:5f:
3a:04:46:5d:0b:cf:ad:14:7e:60:a8:23:e1:32:39:46:0d:19:
ab:54:74:04:ad:e9:cd:0a:5e:bc:f9:e6:ee:33:65:a7:ac:1d:
63:8b:3e:8e:34:bb:46:d1:98:51:e4:89:63:cc:d8:5a:4a:03:
1b:75:78:db:f8:2b:b1:95:13:83:74:e3:52:35:2a:12:06:88:
1e:fe:de:8d:ad:9f:fc:cf:d7:7e:23:91:6a:9c:c6:39:97:d4:
12:46:c6:d2:a7:36:85:c2:f3:83:77:90:bb:e1:35:c0:95:9b:
08:f4:24:3f:70:1e:25:f9:2a:f3:c2:ef:13:b4:c0:f3:5b:9e:
b9:f9:fb:f0:8b:9c:7c:fa:40:f3:e5:18:94:5c:16:56:61:69:
6f:2c:4a:dd:48:45:ef:92:74:77:96:45:e8:47:68:61:f4:98:
d4:64:aa:3d:8e:40:ca:c6:d5:e5:bc:c4:00:82:6b:53:95:ea:
31:0b:f5:51:ec:38:02:b6:cc:d9:62:67:71:60:8f:02:f6:4a:
4a:35:29:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:17:48 2025 by rpki-client