Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4oPErS_YckqMfV6vQxgUyz0VEn4.cer
File: 4oPErS_YckqMfV6vQxgUyz0VEn4.cer (raw, json)
Hash identifier: 1MHjgDfz73f1P5U+HzuI5dDouJcKMb6m1/fFAqye57o=
Subject key identifier: E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3814F93BCC4AEA928ECDB486589C7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200849
IP: 185.92.200.0/22
IP: 2a03:8d20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:81:4f:93:bc:c4:ae:a9:28:ec:db:48:65:89:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e283c4ad2fd8724a8c7d5eaf431814cb3d15127e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1b:21:33:9b:b0:04:0d:b5:ea:30:ee:6f:1f:
ce:1f:a4:39:32:7e:f8:23:96:35:50:e1:9f:05:cf:
8b:0d:1c:51:3a:1c:dd:01:d2:43:4b:7a:ab:e0:74:
23:3a:af:61:a4:19:d1:48:b6:88:c4:dc:c0:05:63:
c4:0c:78:cf:34:b6:b3:a8:43:5c:1b:14:a5:b6:2c:
18:94:6b:79:ef:a0:df:0c:d0:2c:e1:1e:a0:b0:16:
7a:b1:38:3f:74:5b:a6:b1:d5:df:cc:20:cb:8d:30:
1e:59:75:6b:7c:cb:f5:56:9d:b8:79:e0:2f:ae:45:
e9:31:bd:30:87:2b:a5:6a:44:f4:67:32:8d:6c:d9:
68:a4:1e:a8:d9:be:84:7d:66:0c:c9:6c:ab:92:63:
9a:1e:a9:b2:6f:52:ff:fe:03:88:56:08:52:b6:16:
e0:f3:d4:48:d3:30:64:55:44:eb:4e:f3:91:0c:84:
fd:f5:69:d4:a6:06:3a:09:14:5f:d5:ba:c2:e1:1c:
4d:06:b8:e2:fe:14:e5:e3:f2:9f:ca:70:c1:d4:c3:
0c:d3:3f:b6:9e:03:1e:8b:01:06:fb:62:96:8e:17:
1c:00:24:cf:5d:81:43:d2:ca:65:a8:82:75:8c:27:
e6:30:b1:a0:d7:51:3c:96:a5:8f:aa:6b:3f:91:d2:
f1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:83:C4:AD:2F:D8:72:4A:8C:7D:5E:AF:43:18:14:CB:3D:15:12:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b8cc66-cc65-4dc2-ae86-61c1ecaab55f/1/4oPErS_YckqMfV6vQxgUyz0VEn4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.200.0/22
IPv6:
2a03:8d20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200849
Signature Algorithm: sha256WithRSAEncryption
2e:db:2b:e4:e8:80:03:1c:53:86:21:2c:e4:91:ae:b9:11:e1:
50:58:b5:a6:f6:b4:a4:d9:19:c1:59:df:cd:5d:31:9a:0a:90:
1f:b6:20:22:b8:26:ce:b6:cf:3c:ab:c0:bb:7c:2e:20:db:a1:
66:e4:01:44:8e:14:a2:3d:53:80:d3:dd:56:d5:c1:b3:49:26:
dc:55:8d:db:9f:11:9b:f5:38:5b:08:ef:9a:25:92:a1:1c:53:
d4:3f:78:cf:07:41:b6:52:e0:8d:4f:51:23:a9:73:d9:9b:43:
df:c8:e4:8e:eb:9f:8b:9d:6b:0c:1a:55:d1:c4:23:f6:20:eb:
27:b0:80:6e:25:8c:fd:4f:61:9e:1b:2d:56:0e:e3:b7:75:94:
5b:bf:bb:0c:3d:ca:94:eb:9d:56:97:06:dd:66:33:1b:87:6c:
85:48:4f:ec:72:6b:66:3d:5c:2d:d0:ba:ad:fd:5b:12:2f:9a:
63:2c:e6:35:a1:d0:9b:9a:a5:7b:c8:af:5c:58:4b:8a:75:d5:
9d:5a:4f:67:e7:40:9e:59:ea:29:4e:46:5c:66:aa:12:f7:07:
36:9d:64:33:a1:d0:fb:3a:dd:b3:92:ff:3e:b7:6e:ef:ae:11:
88:b0:69:96:9d:18:c0:fa:ed:84:92:f4:4c:7a:5a:e4:6d:6f:
67:9c:dd:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:29 2025 by rpki-client