Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.cer (raw, json)
Hash identifier: 509RYmv6JrWEEY9i81Fvm6Qj9+gDHO+KmUb4eH6LpHY=
Subject key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067D054335E54A1E7901E4116F846E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.88.236.0/22
IP: 2a07:c780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d0:54:33:5e:54:a1:e7:90:1e:41:16:f8:46:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:4b:d9:f3:66:84:15:91:1a:ef:0f:6f:63:
e7:c2:e5:ec:c6:bb:e7:9c:d2:03:80:d1:39:34:a6:
2f:c6:bc:b8:78:41:4d:eb:9c:4e:5e:13:56:03:98:
04:64:e2:a9:4a:67:e8:c2:25:99:32:2b:c3:c4:2f:
51:be:03:07:a5:60:71:cd:25:4d:0c:ea:75:4c:f7:
50:a2:80:73:4f:d8:df:27:2f:fc:56:d1:51:94:f0:
48:ad:bf:d0:f1:05:86:25:78:b0:b8:a8:06:1b:38:
ec:2a:51:2b:35:82:53:d9:fb:61:f7:7c:c4:8b:30:
73:f7:17:15:8c:38:81:a0:0b:8d:7f:bb:12:89:5b:
5e:66:2c:72:3c:30:95:79:13:ae:3a:09:54:ad:a5:
e4:df:8f:5b:75:14:dc:85:3f:20:23:54:e5:c6:19:
9f:de:14:1e:40:2f:47:77:21:db:31:77:9a:a4:c9:
04:2b:a2:b6:c0:62:a1:6e:eb:db:ec:95:3a:50:1f:
09:df:e2:1b:b1:8a:b5:26:a5:a0:86:ab:99:9f:91:
34:ab:b2:b5:c7:f5:70:90:a9:f3:73:d5:ea:ad:61:
a6:07:35:63:0e:49:26:e9:34:2e:dd:e4:00:dd:db:
d9:6b:05:ab:98:63:24:87:91:96:fd:d0:0f:ff:d8:
80:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.236.0/22
IPv6:
2a07:c780::/29
Signature Algorithm: sha256WithRSAEncryption
52:95:60:2d:a1:3d:c2:04:00:73:25:76:34:b3:4c:82:c7:1b:
d8:92:d4:94:53:f7:fd:42:61:0f:d3:de:bb:36:78:b1:40:05:
a5:33:8d:c7:87:2a:a3:d1:b8:64:e5:fb:4e:fb:7d:c2:fa:45:
64:d4:d0:5c:44:92:d9:28:19:03:e2:f2:47:65:f2:cf:ae:3d:
53:cc:67:6d:a3:1b:58:55:ef:1b:de:12:a3:e4:cc:b1:cb:c1:
6e:59:90:a5:28:0c:74:7d:28:f1:6d:84:64:11:fa:f7:49:b4:
a5:7c:ae:1f:af:ed:31:41:c7:de:24:13:47:b2:c9:e6:1d:23:
ed:12:78:8d:dd:3d:86:1d:18:b7:e1:a7:21:51:b3:07:de:99:
74:d0:32:35:51:4b:f3:46:42:c8:95:0f:66:6b:ef:10:3b:36:
f9:be:66:8b:22:49:18:31:2c:6b:0e:f5:ae:dd:10:08:50:47:
61:72:9e:4d:71:7d:27:af:6d:83:b1:d0:11:26:8a:7c:a1:dc:
f7:f9:04:f5:73:ac:dc:55:19:cc:a7:5e:06:f1:5f:12:92:ba:
a9:df:e1:bf:75:c7:85:45:85:d8:6d:52:c3:92:d6:3c:c5:b1:
cc:36:55:5c:e2:1b:35:2b:6d:ed:a2:bd:2d:7b:2a:68:62:29:
95:a2:35:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:28:15 2025 by rpki-client