Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.cer (raw, json)
Hash identifier: fBZncf/+//GIFMlJzxmiSqNE99Qmr1haFnajFDnoyBg=
Subject key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB11F8F8A456D259A60E6E4F529E74
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203438
IP: 90.152.0.0/17
IP: 95.175.192.0/19
IP: 185.79.176.0/22
IP: 212.36.32.0/19
IP: 2a05:7600::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:11:f8:f8:a4:56:d2:59:a6:0e:6e:4f:52:9e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:56:0c:fc:6d:ec:cc:dd:31:c1:19:66:e0:
6f:a5:1d:09:cc:f7:15:97:bf:54:24:12:9d:14:ae:
b4:70:dc:8f:71:ae:f9:b3:72:b1:5f:3e:7d:64:1b:
75:4d:69:e6:6f:c7:8d:bd:54:f6:27:3f:1e:da:6e:
e5:99:36:70:61:ce:f4:2d:94:c2:eb:d2:29:ea:d1:
fb:7b:71:ca:c4:de:4c:cc:60:74:c6:09:6a:f0:ba:
b4:e4:cb:fe:f8:55:5b:71:e9:7d:ab:fc:12:d6:1e:
50:d4:00:82:45:e8:49:6f:6f:a2:f8:40:00:cb:ae:
ae:d6:d8:17:c0:ec:f7:67:20:7a:f2:91:90:3a:ca:
77:0c:f4:b8:71:0c:62:e1:d5:1d:20:60:6d:68:25:
2b:fa:13:a3:9d:02:77:2a:e7:85:6e:0d:f5:6e:44:
44:cf:7c:ad:be:91:71:b1:06:9c:2d:39:0d:cf:aa:
eb:a2:a9:8b:6a:21:a9:d7:cc:e8:c0:8b:ae:90:3a:
02:9a:06:10:63:68:42:4f:fd:a8:92:8e:b9:6a:ba:
5f:db:72:63:63:dc:35:48:64:af:42:a4:4f:6b:da:
ea:2d:69:b2:34:f0:86:48:56:12:cc:b3:26:99:23:
6b:76:4a:50:f8:38:eb:cb:67:33:9d:30:6a:05:e3:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.152.0.0/17
95.175.192.0/19
185.79.176.0/22
212.36.32.0/19
IPv6:
2a05:7600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203438
Signature Algorithm: sha256WithRSAEncryption
36:60:09:e6:ee:22:ea:61:b9:2d:40:3b:c1:0b:e1:7d:5f:b9:
d8:d4:93:55:70:cb:57:a6:9b:6f:f4:ff:84:0e:fa:88:c7:43:
17:51:e4:ab:b9:56:bf:c7:eb:2c:7e:46:d3:32:67:90:21:a4:
1c:25:5b:1b:58:6a:2e:d9:1c:21:8e:32:d6:d2:1e:7a:b6:1d:
c6:c4:0b:e9:ea:94:3e:03:b2:89:7f:9a:bc:f3:4e:25:13:20:
1a:a2:ce:8d:cd:98:9a:f8:0b:f5:bd:07:f2:cc:d5:70:b4:eb:
85:8b:19:4f:19:cb:3c:6a:18:c9:a0:95:78:74:2d:7b:80:94:
24:0c:a1:10:0b:a1:5d:97:3b:2c:0c:d4:ac:e5:78:1a:3b:8a:
49:dd:73:f0:0d:21:90:23:bb:83:1f:77:0d:70:79:ed:4f:04:
9e:41:8c:4f:76:d7:db:ce:e0:9b:4c:01:b7:da:c2:d7:b9:f3:
c0:aa:0c:19:06:37:10:c1:02:7a:e3:b7:b4:f9:56:37:60:20:
2f:80:fc:fb:12:08:57:fe:fb:f5:e3:d2:9c:df:95:d5:7d:a4:
22:f6:56:9f:8a:d1:b9:85:99:a0:e5:3c:06:0a:18:c1:c0:b5:
07:ff:fa:46:95:64:ae:7e:e3:ef:b6:b8:c2:3b:ae:b7:2b:33:
89:f9:82:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:34:56 2025 by rpki-client