Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/D34606949D385DB42714FE71274FAC9948EF279C.cer
File: D34606949D385DB42714FE71274FAC9948EF279C.cer (raw, json)
Hash identifier: mr8O2GLITID87EQbUR0mW/IyDelg6k8ezJcKyZbdo9E=
Subject key identifier: D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
Authority key identifier: 9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
Certificate issuer: /CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Certificate serial: 2BE01672C55CE2FDE8E8DD1AF05FDF45FE650FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Manifest: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
caRepository: rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/
Notify URL: https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before: Tue 12 Nov 2024 13:40:07 +0000
Certificate not after: Tue 11 Nov 2025 13:45:07 +0000
Subordinate resources: IP: 82.140.182.0/23
IP: 84.46.170.0/23
IP: 84.46.200.0/24
IP: 84.46.234.0 -- 84.46.255.255
IP: 86.38.4.0/23
IP: 86.38.7.0/24
IP: 86.38.24.0/24
IP: 86.38.32.0/24
IP: 86.38.37.0/24
IP: 86.38.151.0/24
IP: 86.38.156.0/24
IP: 86.38.175.0/24
IP: 86.38.177.0 -- 86.38.187.255
IP: 86.38.189.0 -- 86.38.190.255
IP: 86.38.200.0/24
IP: 86.38.202.0 -- 86.38.205.255
IP: 86.38.214.0/24
IP: 86.38.216.0 -- 86.38.221.255
IP: 86.38.225.0 -- 86.38.226.255
IP: 86.38.232.0/24
IP: 86.38.235.0/24
IP: 86.38.238.0/24
IP: 86.38.241.0 -- 86.38.243.255
IP: 86.38.246.0 -- 86.38.255.255
IP: 89.116.8.0/22
IP: 89.116.20.0 -- 89.116.39.255
IP: 89.116.44.0 -- 89.116.54.255
IP: 89.116.56.0/24
IP: 89.116.58.0 -- 89.116.70.255
IP: 89.116.72.0 -- 89.116.76.255
IP: 89.116.80.0 -- 89.116.89.255
IP: 89.116.91.0 -- 89.116.92.255
IP: 89.116.96.0/24
IP: 89.116.99.0 -- 89.116.100.255
IP: 89.116.102.0/23
IP: 89.116.106.0 -- 89.116.108.255
IP: 89.116.112.0/23
IP: 89.116.115.0/24
IP: 89.116.123.0/24
IP: 89.116.125.0 -- 89.116.128.255
IP: 89.116.130.0 -- 89.116.132.255
IP: 89.116.135.0/24
IP: 89.116.137.0/24
IP: 89.116.140.0/23
IP: 89.116.144.0/24
IP: 89.116.146.0 -- 89.116.150.255
IP: 89.116.153.0 -- 89.116.154.255
IP: 89.116.156.0/24
IP: 89.116.158.0/24
IP: 89.116.161.0/24
IP: 89.116.163.0 -- 89.116.166.255
IP: 89.116.168.0/23
IP: 89.116.171.0 -- 89.116.173.255
IP: 89.116.175.0/24
IP: 89.116.177.0/24
IP: 89.116.179.0 -- 89.116.186.255
IP: 89.116.189.0 -- 89.116.190.255
IP: 89.116.193.0/24
IP: 89.116.198.0/24
IP: 89.116.200.0/24
IP: 89.116.202.0/23
IP: 89.116.208.0/21
IP: 89.116.218.0/24
IP: 89.116.220.0/23
IP: 89.116.223.0 -- 89.116.231.255
IP: 89.116.233.0 -- 89.116.234.255
IP: 89.116.236.0/23
IP: 89.116.239.0/24
IP: 89.116.241.0 -- 89.116.244.255
IP: 89.116.246.0 -- 89.116.248.255
IP: 89.116.250.0/24
IP: 89.116.252.0/23
IP: 89.116.255.0 -- 89.117.3.255
IP: 89.117.5.0 -- 89.117.9.255
IP: 89.117.11.0 -- 89.117.13.255
IP: 89.117.15.0 -- 89.117.25.255
IP: 89.117.27.0 -- 89.117.33.255
IP: 89.117.35.0 -- 89.117.38.255
IP: 89.117.40.0 -- 89.117.68.255
IP: 89.117.70.0 -- 89.117.85.255
IP: 89.117.87.0 -- 89.117.91.255
IP: 89.117.94.0 -- 89.117.99.255
IP: 89.117.101.0 -- 89.117.107.255
IP: 89.117.109.0/24
IP: 89.117.111.0 -- 89.117.118.255
IP: 89.117.120.0 -- 89.117.124.255
IP: 89.117.126.0/24
IP: 89.117.129.0 -- 89.117.130.255
IP: 89.117.132.0 -- 89.117.136.255
IP: 89.117.139.0/24
IP: 89.117.142.0 -- 89.117.155.255
IP: 89.117.157.0 -- 89.117.164.255
IP: 89.117.167.0 -- 89.117.169.255
IP: 89.117.171.0 -- 89.117.175.255
IP: 89.117.188.0/24
IP: 89.117.190.0/24
IP: 89.117.215.0 -- 89.117.218.255
IP: 89.117.222.0/24
IP: 89.117.226.0 -- 89.117.229.255
IP: 89.117.245.0/24
IP: 89.117.250.0/24
IP: 89.117.254.0/24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:e0:16:72:c5:5c:e2:fd:e8:e8:dd:1a:f0:5f:df:45:fe:65:0f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df85997b1b9b358e1c43f36765aa0a4a02144ae
Validity
Not Before: Nov 12 13:40:07 2024 GMT
Not After : Nov 11 13:45:07 2025 GMT
Subject: CN=D34606949D385DB42714FE71274FAC9948EF279C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:69:0e:d9:9c:35:ed:5c:9f:af:35:3a:4c:93:
c7:2f:83:e5:75:a3:de:5b:2a:b7:f8:d0:21:18:d4:
85:99:ad:3f:4c:89:64:75:d5:72:02:98:6d:23:15:
5b:7b:18:ed:c0:d9:40:08:4a:aa:3d:aa:5d:c3:6f:
b0:15:20:9f:ae:9a:26:88:0a:37:b3:aa:67:60:5a:
57:d1:15:c0:1d:ca:48:1c:a1:4a:12:98:57:93:47:
9e:72:2d:fb:0e:33:4f:83:5f:f1:91:ac:52:51:0a:
91:ce:db:d9:23:b8:b2:f7:a2:39:5a:19:54:4f:33:
6c:26:68:e1:15:f5:8c:31:54:d7:b4:d8:56:c7:fc:
5d:ec:a4:91:3c:ec:b3:e6:87:1b:61:3f:bc:5e:ea:
ae:c1:de:59:56:e4:36:2d:32:fa:66:47:4c:7e:f8:
6d:54:09:aa:42:45:7d:6c:28:be:9a:6b:88:1a:9f:
6b:9a:90:a9:ac:a5:10:70:fa:5b:dd:f1:97:07:f3:
83:3a:64:aa:1f:44:78:79:55:ba:c7:6d:9d:0d:ea:
73:55:4a:f8:f6:bf:4a:bd:21:49:65:a3:53:be:a4:
05:6f:4a:6f:97:be:3f:27:25:74:01:10:5a:da:e3:
5f:35:7e:5a:31:0d:41:d4:72:25:dd:4a:2f:a3:17:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
D3:46:06:94:9D:38:5D:B4:27:14:FE:71:27:4F:AC:99:48:EF:27:9C
X509v3 Authority Key Identifier:
keyid:9D:F8:59:97:B1:B9:B3:58:E1:C4:3F:36:76:5A:A0:A4:A0:21:44:AE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/002e0ba3-fe60-45b1-9160-868a2f8a43b1/3/9DF85997B1B9B358E1C43F36765AA0A4A02144AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfhZl7G5s1jhxD82dlqgpKAhRK4.cer
Subject Information Access:
CA Repository - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/
RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/528a218f-ad28-40d2-bd7f-350eada3d705-0/0/D34606949D385DB42714FE71274FAC9948EF279C.mft
RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.140.182.0/23
84.46.170.0/23
84.46.200.0/24
84.46.234.0-84.46.255.255
86.38.4.0/23
86.38.7.0/24
86.38.24.0/24
86.38.32.0/24
86.38.37.0/24
86.38.151.0/24
86.38.156.0/24
86.38.175.0/24
86.38.177.0-86.38.187.255
86.38.189.0-86.38.190.255
86.38.200.0/24
86.38.202.0-86.38.205.255
86.38.214.0/24
86.38.216.0-86.38.221.255
86.38.225.0-86.38.226.255
86.38.232.0/24
86.38.235.0/24
86.38.238.0/24
86.38.241.0-86.38.243.255
86.38.246.0-86.38.255.255
89.116.8.0/22
89.116.20.0-89.116.39.255
89.116.44.0-89.116.54.255
89.116.56.0/24
89.116.58.0-89.116.70.255
89.116.72.0-89.116.76.255
89.116.80.0-89.116.89.255
89.116.91.0-89.116.92.255
89.116.96.0/24
89.116.99.0-89.116.100.255
89.116.102.0/23
89.116.106.0-89.116.108.255
89.116.112.0/23
89.116.115.0/24
89.116.123.0/24
89.116.125.0-89.116.128.255
89.116.130.0-89.116.132.255
89.116.135.0/24
89.116.137.0/24
89.116.140.0/23
89.116.144.0/24
89.116.146.0-89.116.150.255
89.116.153.0-89.116.154.255
89.116.156.0/24
89.116.158.0/24
89.116.161.0/24
89.116.163.0-89.116.166.255
89.116.168.0/23
89.116.171.0-89.116.173.255
89.116.175.0/24
89.116.177.0/24
89.116.179.0-89.116.186.255
89.116.189.0-89.116.190.255
89.116.193.0/24
89.116.198.0/24
89.116.200.0/24
89.116.202.0/23
89.116.208.0/21
89.116.218.0/24
89.116.220.0/23
89.116.223.0-89.116.231.255
89.116.233.0-89.116.234.255
89.116.236.0/23
89.116.239.0/24
89.116.241.0-89.116.244.255
89.116.246.0-89.116.248.255
89.116.250.0/24
89.116.252.0/23
89.116.255.0-89.117.3.255
89.117.5.0-89.117.9.255
89.117.11.0-89.117.13.255
89.117.15.0-89.117.25.255
89.117.27.0-89.117.33.255
89.117.35.0-89.117.38.255
89.117.40.0-89.117.68.255
89.117.70.0-89.117.85.255
89.117.87.0-89.117.91.255
89.117.94.0-89.117.99.255
89.117.101.0-89.117.107.255
89.117.109.0/24
89.117.111.0-89.117.118.255
89.117.120.0-89.117.124.255
89.117.126.0/24
89.117.129.0-89.117.130.255
89.117.132.0-89.117.136.255
89.117.139.0/24
89.117.142.0-89.117.155.255
89.117.157.0-89.117.164.255
89.117.167.0-89.117.169.255
89.117.171.0-89.117.175.255
89.117.188.0/24
89.117.190.0/24
89.117.215.0-89.117.218.255
89.117.222.0/24
89.117.226.0-89.117.229.255
89.117.245.0/24
89.117.250.0/24
89.117.254.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:fb:9a:f5:39:b5:97:39:37:27:03:c1:b7:51:21:fd:7d:2a:
8a:ed:1b:09:a3:30:13:b2:f0:d0:d2:7c:93:3e:c6:a2:a2:2e:
d1:e3:1a:d8:bf:05:3e:48:26:47:9f:82:3a:e3:97:c3:eb:70:
bb:c9:17:f9:a8:00:c4:84:b4:2e:33:99:65:dc:df:bf:c8:64:
d6:a4:4c:e2:5c:2e:fb:95:68:76:cb:1c:a8:d3:2e:6c:60:1b:
4d:09:33:5e:fb:0b:f9:19:29:84:05:b4:b3:7b:6e:9c:3e:33:
db:75:d4:ad:2a:16:ee:b1:42:73:c7:59:d6:49:e6:89:9f:cd:
87:26:ac:74:71:41:fe:21:e8:b5:8e:dc:61:5e:cd:44:0b:46:
a6:57:48:ab:80:9d:25:47:1f:8f:5d:b0:32:f1:e5:86:70:e4:
2b:09:d0:49:1d:42:70:e8:12:d1:79:63:81:a4:bf:03:31:19:
a8:22:21:7f:e9:90:1b:c0:bf:67:f9:f3:d8:25:49:36:04:a9:
95:6c:de:b6:d2:50:01:40:15:5e:01:85:5a:d5:5f:c5:4f:d7:
37:97:35:c7:87:c3:d2:00:c9:bd:18:56:40:79:89:3d:3a:44:
55:ab:81:c2:85:5c:b7:d8:82:fc:7f:4c:e2:c1:e6:b8:d2:29:
97:40:e2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org