Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer
File: xQ5yN_FFmv9NWuCUvSyFJW4uLj0.cer (raw, json)
Hash identifier: glSM8CAy/vfzOb62l1DCF5GK8wN+rtp6EWgvgk/hQPE=
Subject key identifier: C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194A2DBD8045756BE33B441702B99A32C40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 26 Jan 2025 13:45:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.240.95.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a2:db:d8:04:57:56:be:33:b4:41:70:2b:99:a3:2c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 26 13:45:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c50e7237f1459aff4d5ae094bd2c85256e2e2e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:87:8b:cc:a4:3a:e0:6e:e8:8b:be:e1:80:c7:
6a:f8:8a:5d:b8:2f:e2:a1:a9:22:bf:7b:f7:0f:1b:
57:4a:63:69:89:75:aa:01:be:5a:58:2a:61:fd:58:
0b:8a:a4:7b:88:1a:42:ba:77:e4:f8:10:30:fb:48:
c4:e8:14:d1:7d:7f:92:0f:0f:cf:76:90:27:63:2f:
82:05:07:f0:58:4b:92:9d:a5:7a:34:bb:83:b8:68:
56:a3:b4:e0:8b:82:61:8a:26:c4:db:0a:aa:a4:fd:
e1:7d:a7:83:3a:45:dd:e7:89:37:56:17:8b:a6:ec:
95:43:39:45:9a:9e:47:23:11:54:b3:e1:93:e1:ba:
64:4b:28:fb:f1:64:39:fc:c6:92:11:2d:99:60:74:
92:77:37:dd:4b:9f:6c:da:58:06:8a:23:0a:16:ba:
a4:74:3d:d4:c8:5c:0e:ef:63:9b:9f:00:33:11:2a:
8f:f4:99:cd:ec:25:35:e9:76:44:71:6f:89:df:27:
7f:5d:6c:4f:8a:48:20:9a:a4:43:fe:27:72:55:0d:
e9:23:bf:f4:d4:a8:b7:ee:ad:06:27:4d:f7:64:2f:
c2:7c:0d:91:25:ff:f8:dd:0c:28:09:ef:5c:2d:be:
b3:5d:bc:6d:6b:3f:42:06:ac:77:64:15:cb:f9:4b:
01:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0E:72:37:F1:45:9A:FF:4D:5A:E0:94:BD:2C:85:25:6E:2E:2E:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03650c-d7bb-4f13-b200-50d018bb0bf6/1/xQ5yN_FFmv9NWuCUvSyFJW4uLj0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.95.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ac:6e:37:93:4f:49:da:4d:8e:54:fc:c8:87:cb:15:58:6f:
c2:19:fe:6d:d3:b2:99:45:fd:70:23:c8:20:ec:55:e0:0c:a2:
63:74:9e:c4:48:82:a5:e5:fd:bc:11:c6:3e:06:7b:0a:ec:e9:
d3:6b:52:31:f6:9e:d3:6c:90:68:08:c9:34:38:5c:5b:f8:af:
89:84:0d:53:6a:47:e5:e8:2c:c8:68:7a:fe:96:a0:f5:03:f5:
63:97:dd:1d:43:a9:a2:ab:92:73:5f:d2:08:67:c0:91:88:7b:
e3:10:eb:1e:1b:a9:3e:31:fc:79:a0:a4:69:41:4d:8f:cc:55:
b3:be:7e:56:16:3c:bb:42:8e:23:b4:f0:3a:6e:ee:d2:6b:8c:
f2:d0:bd:da:b5:97:21:8e:41:70:c3:11:8e:98:3a:ec:b3:07:
99:f0:63:5e:82:f7:e3:db:ea:ff:29:15:b8:cc:19:91:07:71:
49:66:89:81:d6:a7:c5:18:4a:41:5c:f4:23:d4:61:a8:1c:63:
68:16:40:54:7b:c8:89:77:3c:10:19:91:02:58:66:1b:59:bb:
31:b0:f3:21:d5:c2:0c:c5:2a:0a:2e:00:b0:1d:2a:46:b9:64:
47:ae:09:2c:58:92:01:68:79:2f:52:33:69:8f:d5:10:4d:78:
7c:95:4f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:42:38 2025 by rpki-client