Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer
File: Ay05zpG-hnz1zhtgCdUmLCi2Ugk.cer (raw, json)
Hash identifier: C1TLmLO6cqivAG4uSwyUC/HDBE8RIlrJJ73Kmvym+7g=
Subject key identifier: 03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942522263F91AA901EF3259B8D800301E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204274
IP: 85.184.128.0/18
IP: 85.191.0.0/17
IP: 87.104.64.0/18
IP: 185.107.200.0/22
IP: 2a01:7dc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:26:3f:91:aa:90:1e:f3:25:9b:8d:80:03:01:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=032d39ce91be867cf5ce1b6009d5262c28b65209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:80:43:de:43:a4:e5:27:c7:6d:7d:83:cd:
7a:d1:2b:55:55:ae:ce:2a:44:3a:bf:a1:6f:87:b7:
27:48:64:ec:65:2e:18:74:58:b3:10:6b:a1:f2:69:
24:54:eb:05:94:0c:ed:3c:4a:37:ef:72:da:56:c2:
af:b8:7a:17:75:67:f6:d5:6d:f4:65:8f:fa:1d:0f:
c7:94:cc:fe:42:22:38:f5:ca:12:21:02:ad:63:77:
4b:cd:ba:b7:19:a4:e3:99:2c:0c:c4:c8:e4:d2:64:
bb:db:13:24:f7:24:96:84:72:66:24:46:09:86:bc:
b0:78:b4:6a:7c:1d:88:fa:0c:2d:05:3e:58:f0:b4:
00:fc:df:6c:4d:95:b2:43:3e:9d:ce:f1:d1:8a:49:
76:a9:da:75:46:ff:bc:36:56:dd:0c:65:cf:b6:cb:
8b:8d:3e:02:72:b0:06:9c:31:6b:92:86:3f:a1:44:
86:fd:89:b1:76:fb:87:c3:6d:b1:56:f9:dc:2c:4c:
ee:4f:a2:28:26:64:ea:39:60:e9:78:e1:bd:e7:5d:
c9:35:5a:5f:f8:c2:f1:11:3c:3e:20:76:8a:a3:4d:
53:a5:a5:ea:5e:9d:98:ed:8a:04:72:55:54:04:4b:
47:ea:c9:c4:ad:b6:d0:2e:0c:d7:e9:f0:d4:da:8f:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:2D:39:CE:91:BE:86:7C:F5:CE:1B:60:09:D5:26:2C:28:B6:52:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/cbe8e7-5a78-4558-9951-84accecc51f0/1/Ay05zpG-hnz1zhtgCdUmLCi2Ugk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.184.128.0/18
85.191.0.0/17
87.104.64.0/18
185.107.200.0/22
IPv6:
2a01:7dc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204274
Signature Algorithm: sha256WithRSAEncryption
89:6d:4e:22:24:60:e6:fc:50:25:e7:af:36:06:95:42:df:fb:
05:d7:d1:71:eb:5f:1d:41:f6:91:e6:ae:34:23:98:7c:27:1e:
21:70:09:ff:3c:4f:f6:69:fe:46:c5:88:e7:76:c6:ff:b2:1f:
be:0c:4a:3f:01:84:3e:3a:d1:4b:c3:0c:32:ff:8d:f6:38:8b:
2d:b6:95:be:2d:a0:25:7d:81:21:f6:22:86:cf:9e:23:80:a4:
6b:91:4a:ca:7b:56:95:a3:39:08:81:60:98:c5:7d:d9:91:67:
02:ca:80:de:3d:51:16:ae:1e:73:08:40:19:12:05:b8:40:d2:
80:3e:5a:fc:72:31:e8:d7:66:6f:4a:fb:95:c6:f4:01:01:71:
aa:d7:35:ad:b9:5a:d3:31:27:72:c9:75:4f:cc:bc:92:42:f0:
25:7f:37:f8:71:74:4b:a4:5f:67:d6:13:da:f5:9b:0a:cf:82:
93:c7:3e:c3:81:89:22:5d:a3:cf:a3:85:8a:4a:02:87:83:a4:
bb:08:13:9c:81:39:b7:c8:bb:2d:b3:f0:d8:30:c4:c2:ce:d6:
d0:0d:68:04:00:0a:83:42:17:8b:d6:7e:fb:ee:a3:e2:40:36:
6f:f5:0d:af:83:f1:30:40:50:ea:dd:d9:f9:b9:04:f0:88:32:
c7:3d:23:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:17:45 2025 by rpki-client