Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer
File: r_QkLBDkOFN-FpqwAr9r6B-ipe0.cer (raw, json)
Hash identifier: +vttjFVIGYhSV/hFRJ79OebcrothSNkTawf2H2x2bpw=
Subject key identifier: AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC576BCE93E272E732844FA62E034A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.135.220.0/22
IP: 2a06:5180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:57:6b:ce:93:e2:72:e7:32:84:4f:a6:2e:03:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aff4242c10e438537e169ab002bf6be81fa2a5ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a8:fc:3a:5c:9c:c9:eb:dd:70:7b:bc:b7:fd:
32:c6:6a:07:b7:55:a7:15:ae:b5:1b:c6:3a:9c:ae:
c8:66:05:52:3f:81:b6:83:16:03:2d:4e:00:8b:72:
0a:8c:50:b7:60:40:63:79:c3:ac:9e:e8:09:74:82:
06:16:34:10:03:61:ea:9e:b5:4f:71:22:24:43:d1:
44:d7:f2:a0:00:c8:da:78:29:ea:97:28:62:bf:23:
80:e3:4a:f0:5d:cb:24:bb:27:2d:e6:42:60:8d:d3:
0d:c2:0c:fe:45:1c:5d:4a:7f:1a:a6:8d:3e:6b:3a:
3f:91:9c:67:ec:f4:7b:f6:70:d0:5a:da:0a:78:cc:
5d:57:6e:cc:ce:68:18:f9:e9:ac:f6:88:32:3f:40:
6c:5b:a4:61:aa:86:96:ae:f7:ed:8d:ae:ec:c1:18:
e9:a0:14:a3:be:50:f7:32:91:43:72:97:9c:bd:cf:
5a:a0:62:2a:3c:b0:1d:66:7b:4e:ef:83:a5:4f:c1:
d3:a1:df:27:75:d4:b0:27:4d:65:bd:f7:d6:19:6a:
f7:85:c8:52:6b:bb:08:a1:5f:0d:44:34:c1:f7:bf:
a7:89:0b:e0:74:c9:97:cc:ca:be:86:df:ff:81:d2:
44:f8:8d:9c:f8:e6:67:6f:bd:ef:63:35:d4:50:c7:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F4:24:2C:10:E4:38:53:7E:16:9A:B0:02:BF:6B:E8:1F:A2:A5:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b9a283-5c8d-4628-80bc-ee7ba0e9f7ca/1/r_QkLBDkOFN-FpqwAr9r6B-ipe0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.220.0/22
IPv6:
2a06:5180::/29
Signature Algorithm: sha256WithRSAEncryption
9e:cf:bd:71:6a:55:45:94:60:df:ba:35:4e:16:7d:5f:81:df:
19:18:27:3f:7a:f8:8c:8a:3a:63:f3:d5:92:37:02:78:3c:9c:
15:75:cd:1c:ae:ea:34:2c:a1:5e:8b:72:e0:75:9c:ab:a5:1e:
a9:64:34:a6:a3:a1:6e:89:c7:6c:bf:2e:26:e2:1e:0e:8c:69:
75:f6:9b:9c:c6:cd:ba:f6:2b:06:41:47:af:b6:d0:0e:03:6b:
bb:3e:57:78:96:26:e4:dc:ae:0d:c4:6c:da:87:f9:b7:7c:31:
0d:aa:18:c0:57:f7:d2:18:7c:26:0d:ec:8a:94:bb:e9:6e:fa:
19:5f:ad:bf:b4:ae:62:46:22:1f:4e:0d:97:0a:ac:96:db:11:
fd:be:2d:11:ee:1e:76:87:4c:31:57:69:57:ef:32:05:11:b1:
90:de:38:98:59:40:04:7c:1a:38:5f:7a:54:e8:07:58:c2:21:
d0:84:2c:7c:31:7c:0b:ed:a8:d8:82:a2:87:e0:57:5f:3f:b6:
85:57:95:8f:13:d0:2b:80:0f:54:ac:3d:57:d1:27:4a:89:36:
fe:d5:f7:bf:65:1d:41:b4:c6:d6:d5:89:ac:ca:f8:86:7d:c4:
b1:2e:9f:d9:68:de:fb:9e:b0:1c:a6:e1:a4:08:10:97:9d:4b:
40:63:00:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:36:23 2025 by rpki-client