Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EH99C2TJjJno0IaDUFJk1rCL_YY.cer
File: EH99C2TJjJno0IaDUFJk1rCL_YY.cer (raw, json)
Hash identifier: 4nNOZeQmtiPRwlchFANNvwoBDcBx38MuxMiVl2FBMz0=
Subject key identifier: 10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C4099C044C199EE68BABDF76C59EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57707
IP: 171.25.220.0 -- 171.25.222.255
IP: 2001:678:88c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:40:99:c0:44:c1:99:ee:68:ba:bd:f7:6c:59:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=107f7d0b64c98c99e8d08683505264d6b08bfd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:81:8f:48:5b:69:1c:09:c6:c5:e8:c6:a2:
62:00:4b:9e:45:03:6c:e1:a1:7b:00:9a:90:fa:7e:
89:85:2f:e2:be:f1:ad:8f:e4:4c:6f:d3:2c:fd:1b:
d8:27:86:3b:15:b1:70:6f:02:3c:c1:27:9e:94:87:
6f:7f:17:a5:14:b1:c3:8c:c1:be:fb:20:88:97:da:
1d:5a:d2:ad:7b:93:c9:07:cc:29:73:97:bd:2d:2d:
8b:ea:2a:f3:c0:73:ac:23:fe:c2:0b:ac:00:a9:d2:
28:21:96:d7:e4:02:ea:91:61:a8:72:6c:4d:b7:f6:
ca:02:09:38:c3:27:91:a5:2d:21:c4:47:37:fb:a1:
1f:fd:03:1d:55:a3:a0:33:5d:72:a7:e4:b8:c8:9d:
bb:05:40:7d:80:27:a6:10:9b:ef:3f:1f:68:50:0f:
51:3b:54:a5:3f:f5:df:88:5b:42:0c:35:12:ba:d3:
1a:00:4e:1e:63:c0:b7:8b:66:01:ec:48:28:6c:1c:
08:9b:98:62:9f:ed:44:63:40:1a:17:00:c3:ab:03:
8d:da:16:6c:1e:19:98:a5:50:42:5e:5e:34:36:8b:
4a:be:50:94:a4:81:56:10:43:3b:57:a5:0a:43:87:
ee:ab:8f:a1:9f:72:31:3a:18:08:05:cf:c7:df:f1:
ee:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7F:7D:0B:64:C9:8C:99:E8:D0:86:83:50:52:64:D6:B0:8B:FD:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/386185-5acc-4fe1-9784-6b4afa40678d/1/EH99C2TJjJno0IaDUFJk1rCL_YY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.220.0-171.25.222.255
IPv6:
2001:678:88c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57707
Signature Algorithm: sha256WithRSAEncryption
3c:d5:e6:b9:6c:88:03:05:96:f3:9c:ef:d7:ec:5c:82:24:04:
c1:03:2f:2b:91:3b:2b:26:b9:e7:c7:e4:b9:27:3e:3b:32:ff:
cf:fd:56:e2:57:6f:8d:0f:48:0f:93:ef:51:1d:2a:27:5b:b7:
40:04:95:f7:ec:d4:7a:32:47:bd:9c:6b:da:58:33:86:95:7c:
5f:b8:67:45:84:e7:f1:dd:89:34:e0:0f:a6:99:14:e3:d4:3e:
bc:4a:db:d0:a3:42:2f:14:16:62:fb:d3:57:18:92:86:95:9b:
6a:0b:22:fc:22:9c:93:0c:9b:ab:98:a2:f5:19:3b:6b:3d:41:
31:8b:60:1e:7c:15:79:cc:90:d8:15:e8:53:7a:9b:45:4b:ad:
07:29:8d:cc:64:1a:0e:7a:1c:6e:6b:44:f0:4b:a4:8f:bd:77:
ca:31:8a:b7:83:df:b9:26:4f:51:f8:ee:a6:ee:88:a2:2d:16:
9e:d3:96:69:c4:e1:1f:f5:89:7c:b1:c3:6d:fe:cb:42:6c:ae:
2b:7e:1b:15:63:b1:bb:76:98:e1:17:e7:40:05:d2:c0:ed:82:
d4:e2:d2:90:c1:6c:02:bb:39:bc:18:36:00:2a:2d:ab:4f:4a:
09:4a:3b:88:e2:de:62:81:01:e2:92:ad:c0:f2:f4:45:55:70:
1d:a1:31:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 09:58:36 2025 by rpki-client