Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
File: 9r15bwtjNc_hKKXPm5fudoCC7Y0.cer (raw, json)
Hash identifier: Zg4zIBR5CE1veCMpvxWoPE/Wk1TsfRDNBbT0jdJRx+U=
Subject key identifier: F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01966C6043EBD8CD38BE12DD4F118C32AC6A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 25 Apr 2025 09:56:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.17.201.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:60:43:eb:d8:cd:38:be:12:dd:4f:11:8c:32:ac:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 25 09:56:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:38:e8:23:38:b2:8b:af:de:82:d3:f9:77:5a:
8e:77:1e:6b:72:39:c3:f7:c8:cf:48:7a:91:55:5a:
db:7e:5b:93:04:39:b3:a4:8b:14:3d:3b:78:e5:dd:
da:e7:38:66:82:2a:74:23:99:28:ef:c9:30:89:c6:
4c:f9:7e:6f:53:36:65:71:df:95:49:d0:62:b5:e0:
76:a9:22:dc:78:71:e5:fa:2a:ae:6a:da:76:5d:9c:
dd:b5:2f:7a:3a:1b:09:aa:bd:6d:10:d7:df:7c:b3:
a9:87:e2:7c:46:62:d7:e2:2b:da:59:0d:f1:cb:04:
a2:de:8d:c5:c3:cd:f1:cd:e5:ca:14:68:b4:81:f0:
37:d6:e2:c2:29:3b:2d:31:e8:6d:18:4c:01:dd:92:
2f:ec:35:fc:2f:db:75:16:83:7a:38:fd:cb:3f:46:
9a:79:28:3d:f6:8f:b1:a6:73:1a:e2:59:0d:8f:b7:
34:f6:cb:9c:b6:88:ae:f0:d7:43:f1:bf:c0:30:4c:
5f:b3:2a:36:43:9d:77:c1:6e:35:8d:e9:db:f0:1a:
0c:26:69:9a:e7:f0:16:1d:8a:74:31:1e:85:4a:a8:
f7:38:95:d2:10:f3:32:60:e6:bc:67:7b:a6:01:92:
48:ec:10:67:9e:ef:ca:0a:75:96:f6:dd:eb:86:e2:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.201.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7a:2a:e9:9a:51:67:45:6d:98:4b:d2:bd:db:42:ef:aa:93:
b7:51:39:0b:cc:f0:09:2b:ee:2f:c2:96:35:0c:65:b8:a3:65:
34:89:76:f9:37:18:c0:d9:33:6e:e2:03:e8:48:b1:db:71:3c:
03:00:4f:2a:00:cb:f4:b4:17:00:05:c9:ac:6e:6e:39:d7:b7:
43:df:95:39:01:1e:fe:67:88:e6:48:f3:56:6a:7f:b8:37:e0:
e5:30:5a:c0:a2:73:aa:69:d0:b8:41:68:95:f0:ab:f5:11:c2:
31:50:52:b2:74:2e:97:7b:4d:ec:48:24:b9:49:e8:30:14:bf:
ba:1d:2c:8a:03:65:65:c9:2f:8a:32:c4:3f:f9:fa:d8:3f:3a:
3d:4c:cc:8a:f9:ff:1b:f3:f8:10:84:87:4a:25:14:77:57:bf:
c5:58:a1:25:8d:7d:89:c0:ca:64:b5:b2:bc:71:a6:df:3e:92:
b9:82:c8:ef:5f:67:b1:53:42:63:7e:df:02:de:84:f1:fa:7b:
7a:c8:ef:3b:e9:84:d4:ae:e7:02:8a:f0:57:be:0d:ee:16:96:
4b:fa:fe:f2:8e:11:ad:23:07:3c:32:ae:7f:66:72:79:12:aa:
c9:e5:f7:19:30:9c:0c:e8:09:5a:7b:08:19:a3:90:f9:eb:8b:
41:d5:e3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:13:22 2025 by rpki-client