Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5XXe8Yp160XEQHcaziRsUOip0xY.cer
File: 5XXe8Yp160XEQHcaziRsUOip0xY.cer (raw, json)
Hash identifier: ossAOkyqY/nQ78TOa5/ynw2XhVaGhRqCUzeYSThTkSU=
Subject key identifier: E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E199CCC5E4FDA8015BA66ADCDB1C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57601
IP: 91.233.103.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:19:9c:cc:5e:4f:da:80:15:ba:66:ad:cd:b1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e575def18a75eb45c440771ace246c50e8a9d316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:77:2f:24:c9:f2:07:c1:1f:65:7d:54:b9:
31:81:ff:ea:b8:bc:d4:52:86:b6:f7:e6:37:ea:1e:
7c:bf:2d:ef:13:91:88:72:53:be:2a:41:e3:4f:61:
aa:95:a7:6f:ed:a4:07:5e:64:ce:56:d1:7b:1b:44:
2a:0b:a2:cc:3f:61:bd:9f:71:ac:7d:12:bb:df:1f:
8d:22:e1:f6:85:c3:59:71:b7:a5:48:fa:b6:72:11:
c6:10:b6:fb:90:2a:4b:c0:8c:25:aa:e2:93:54:9e:
60:e6:35:4f:2f:b7:fc:10:0e:9d:e0:53:d8:63:a7:
f3:83:8b:39:c1:bf:2d:f1:f1:50:a4:f2:2d:4f:4c:
3c:6f:9c:ed:73:e2:7c:90:04:37:62:60:5c:a2:2c:
ee:06:a7:0e:c4:df:c7:4f:87:32:52:42:09:41:9a:
b6:5c:bd:33:30:8e:6d:e7:3a:dc:12:d9:a0:3e:8b:
c9:28:f9:40:ff:f6:a6:fc:43:1f:9b:8c:f1:0a:6a:
4b:17:a0:3d:8f:95:b5:a4:1d:23:6e:dc:ff:0b:3e:
47:15:20:87:7b:38:e9:00:47:f7:f8:4f:4f:01:c0:
51:43:4e:6b:4d:c7:c0:9e:6e:4c:54:81:4d:6f:10:
53:27:52:b1:de:e2:44:ed:27:6e:96:0a:5b:a9:eb:
48:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:75:DE:F1:8A:75:EB:45:C4:40:77:1A:CE:24:6C:50:E8:A9:D3:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ca0898-2979-43ae-8b89-fb9741359727/1/5XXe8Yp160XEQHcaziRsUOip0xY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.103.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57601
Signature Algorithm: sha256WithRSAEncryption
58:dd:3e:3b:e2:f3:60:8a:f4:7b:34:16:a7:e5:cf:55:e3:bb:
83:00:38:a1:9c:ed:86:6c:a9:61:db:66:01:46:e8:a5:44:e7:
54:4d:b6:96:ac:b6:1f:81:a9:8e:90:45:1a:9a:6a:c0:a2:a9:
83:63:f1:a8:c5:e6:1d:37:8f:1c:f7:df:f2:ab:76:29:ea:57:
f5:a4:19:35:b5:d2:4c:0d:4d:09:b1:8b:67:8d:39:02:8b:af:
00:b8:8c:60:9e:3f:07:79:f5:a3:c4:34:f8:bb:19:77:ed:a1:
a1:ad:38:a2:a1:17:59:a5:ac:6b:91:b3:58:0e:84:70:00:2c:
29:ec:11:1a:af:1f:88:6d:8a:80:12:ae:29:33:8b:38:61:58:
f7:63:de:5c:9c:c8:c9:41:3f:a2:49:69:7d:bb:5f:21:5e:68:
0a:5b:5e:80:cc:5e:28:aa:f5:22:38:88:a5:ef:5e:89:7f:81:
6c:c4:2a:51:7f:1b:69:e5:85:f7:33:29:4c:c8:77:cb:ee:80:
d6:fc:64:52:7b:cc:6d:da:a7:bc:e4:81:8f:64:01:9d:3f:43:
ee:0e:b2:2c:fb:5d:b7:b0:96:3b:1e:a3:05:b3:25:b0:a1:29:
5f:73:54:47:17:9f:19:68:6e:8d:30:e4:76:3a:c9:fd:d0:03:
a3:93:5e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:46:58 2025 by rpki-client