Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v99XKOyr1W70Y3NWlVhmylRoaRo.cer
File: v99XKOyr1W70Y3NWlVhmylRoaRo.cer (raw, json)
Hash identifier: hVnXoCcYSbeZsWXmWbVi6O1WNJQ+7gXIoQitOSdR1c8=
Subject key identifier: BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942C156A2809DF00C5DAC69909966F2222
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 03 Jan 2025 12:13:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.32.215.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:2c:15:6a:28:09:df:00:c5:da:c6:99:09:96:6f:22:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 3 12:13:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfdf5728ecabd56ef4637356955866ca5468691a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:63:f6:d1:dc:81:06:72:91:d2:bd:89:52:
54:b9:e7:6a:ce:b0:f8:78:d8:23:31:b1:df:6d:de:
d4:14:f1:f5:dd:5a:44:6a:58:c7:ce:76:44:57:0c:
68:9b:36:03:8e:36:7c:d5:7c:24:49:6e:f0:68:1a:
51:03:1a:18:4b:64:1e:35:d1:70:f7:78:bd:45:ea:
fe:10:43:78:24:67:d7:b2:90:61:8e:4b:64:2f:5e:
c6:40:a9:33:e0:ef:98:89:7b:41:01:84:84:3f:db:
dc:de:d2:bb:86:79:82:75:fa:e0:b5:7b:69:6d:9a:
d2:ef:dc:7c:37:11:ec:83:ef:8c:4d:c9:91:1e:a0:
07:22:70:0e:5e:05:28:f1:65:32:00:29:0e:52:59:
70:3a:d9:2e:ca:56:19:46:f8:34:b5:6a:ba:59:12:
c5:3d:a0:a7:10:c2:7a:46:94:36:94:20:e2:d9:90:
e7:91:22:a0:64:ff:91:1b:f0:7e:db:a5:a7:00:c1:
e6:84:8a:ed:65:7e:78:ab:9b:3b:62:da:34:1b:99:
5c:2b:b1:95:ed:39:87:3a:e6:22:0f:ce:68:5c:08:
ae:b9:66:a4:8f:f2:1f:bd:69:88:6b:6c:fc:1d:f0:
92:84:b1:9e:9a:5f:e4:c2:60:08:d6:34:2b:c1:e9:
80:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DF:57:28:EC:AB:D5:6E:F4:63:73:56:95:58:66:CA:54:68:69:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/fcf322-17c1-4f40-a618-bd14d344bbf2/1/v99XKOyr1W70Y3NWlVhmylRoaRo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.215.0/24
Signature Algorithm: sha256WithRSAEncryption
73:45:0a:c9:50:0a:e1:be:4a:a0:05:fd:8f:6e:73:70:94:f8:
ee:27:c5:74:5f:45:27:3a:c8:9e:60:44:4e:f3:34:3b:50:22:
3c:e6:4d:fc:76:0f:d2:dd:30:6c:4b:a8:fe:cf:80:78:87:e3:
02:c6:cc:e6:e1:1f:e4:ab:e7:e7:b7:05:21:2b:e6:e8:43:8f:
9b:ad:91:25:1e:ad:15:47:08:21:65:61:d6:ce:79:f6:96:d0:
08:07:35:1c:74:3c:d3:36:80:01:2b:12:d0:52:96:1e:00:a9:
a1:c1:90:02:32:85:a6:e5:3c:95:f8:50:97:78:38:86:c1:80:
ca:7b:7a:f3:25:ee:c6:ea:f8:18:c7:90:03:1b:bd:19:97:f5:
79:21:24:ff:0d:c8:38:6d:09:7e:ff:dd:69:33:29:7e:2b:47:
2a:e0:b9:fc:42:86:df:e0:cf:f7:22:fe:9e:45:a3:cd:ce:26:
2d:a9:fc:96:07:99:f2:a1:17:0f:20:d1:27:90:d7:02:b8:5b:
76:8e:bf:4f:e1:42:17:8d:00:7b:36:e3:5b:bf:c5:96:6d:0d:
70:a7:2a:70:07:02:d2:4e:b7:43:71:21:51:79:39:2b:cd:78:
36:52:74:e0:f5:b6:50:3d:96:e2:e6:d4:b9:b8:eb:0f:90:7f:
5c:16:90:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:45 2025 by rpki-client