Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.cer (raw, json)
Hash identifier: THIJtEqYi9CFZ4DCbJJSZYsig/BH/ZE1CbL9nzqBhAo=
Subject key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444D44B494F5498C7172F15E1C01187
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 52140
IP: 46.255.216.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d4:4b:49:4f:54:98:c7:17:2f:15:e1:c0:11:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:71:4f:e6:39:68:74:8f:01:1b:ac:99:dc:cb:
98:9d:2b:5c:8f:7f:5b:2c:73:9c:2a:55:56:c7:a5:
48:af:59:85:2c:a2:50:14:26:6b:9a:2b:fe:e5:b0:
5c:41:94:bf:d9:70:99:02:a1:d1:b7:50:17:d5:64:
e7:2e:4c:31:11:f7:86:40:6e:2c:82:36:02:da:a6:
af:69:ff:de:78:63:5d:57:4e:a6:45:6d:7d:f1:65:
d4:46:d3:66:f1:da:98:d1:d2:17:b6:84:64:3e:ff:
93:66:42:bb:c1:77:72:78:59:61:6c:d9:eb:d1:ad:
54:fa:61:6f:7d:dd:1e:5c:16:14:44:ec:9e:64:ea:
e2:b1:a7:35:0f:95:60:72:db:53:05:cc:90:3c:da:
fc:d5:03:59:55:89:e4:5d:4e:c5:20:d0:f1:d4:02:
ee:13:da:05:d3:b8:78:14:c9:b2:a5:8b:75:82:94:
75:54:02:86:05:14:6d:13:63:1b:44:82:94:b4:1e:
9f:31:f2:42:3b:df:c6:bd:e3:00:e2:ff:1f:10:36:
f5:39:62:3c:96:24:8b:4f:f0:b2:fe:3e:f5:dd:61:
28:b4:70:1a:13:02:c6:6c:cf:9d:ad:fc:82:e7:8d:
a8:2e:45:1f:15:75:c7:1c:06:74:d4:e7:41:fa:ba:
77:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.216.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52140
Signature Algorithm: sha256WithRSAEncryption
17:9c:75:c6:1e:c9:c2:d9:10:9a:78:73:c4:7f:14:62:1e:e7:
6f:11:a8:20:9a:ad:a9:b4:7d:02:1c:4b:6c:02:3f:18:b9:a1:
84:11:12:3d:83:88:b2:62:53:d5:90:8c:fb:07:a8:0d:4c:a0:
3b:a7:3c:c5:eb:c4:80:6a:3a:7a:74:cf:41:b9:42:8c:6f:41:
06:f8:9a:93:fb:28:41:14:62:0f:d8:fb:3d:a3:75:6d:f8:c8:
5a:61:94:76:90:ed:3f:3d:8e:55:a2:c9:e7:3f:0f:4f:1b:05:
1d:1d:76:1c:2a:0b:83:da:4e:c9:77:14:93:43:38:08:de:62:
56:d4:2c:d3:58:ce:18:70:11:c5:56:32:c6:73:93:f2:b6:52:
f0:dc:e1:44:21:a2:94:4e:58:b3:93:13:9d:d9:42:3c:dd:ee:
61:54:a4:13:13:b5:33:4a:84:96:47:c8:8a:b1:32:ee:25:88:
5d:5f:f9:51:72:e6:3c:13:3b:f7:11:f0:37:12:de:e2:50:82:
80:00:df:b9:01:28:c0:fc:f8:6b:16:d2:f0:be:5b:17:05:a6:
7e:6e:51:16:5c:c1:8f:61:ea:b2:b2:99:f0:13:4f:f9:7d:a5:
5c:8b:65:0b:bd:08:bf:d3:ab:49:ed:9e:52:d5:e1:81:1c:6c:
04:9d:0b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:45:33 2025 by rpki-client