Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ILSHOEKpBPGmlyATk-e6YmhC9K8.cer
File: ILSHOEKpBPGmlyATk-e6YmhC9K8.cer (raw, json)
Hash identifier: 4U3fGyuaOPdxRfKoQXzjAaDN6GKMB3U/ieYCoObCdUc=
Subject key identifier: 20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019623BAFA69B7D6706757E8945947E179D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 11 Apr 2025 07:22:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50333
IP: 85.255.240.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:23:ba:fa:69:b7:d6:70:67:57:e8:94:59:47:e1:79:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 11 07:22:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20b4873842a904f1a697201393e7ba626842f4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8f:91:ee:9d:a7:2c:fb:8a:32:ae:41:70:a8:
a9:f0:01:9b:eb:35:3e:fb:d8:ec:95:93:83:2a:1b:
cb:b9:66:c2:4f:b5:26:e5:b6:31:7d:21:29:33:f7:
7e:cb:a3:2d:a7:18:9c:c7:e1:99:14:db:35:32:df:
81:5b:32:0e:d9:13:18:50:7e:69:3b:22:dd:9d:6f:
3f:4b:c6:b5:d1:c3:a4:60:52:d6:f8:ae:24:dc:99:
4a:66:8f:30:8b:6e:9c:70:9b:2c:bc:5a:55:75:b5:
9f:3c:bd:72:75:f5:85:71:ad:29:ee:ee:9c:ba:4b:
28:9b:03:ec:a2:21:c6:89:40:b2:1d:7f:33:82:3e:
41:76:e4:b2:34:76:e7:3f:0e:ce:d9:87:6e:3f:33:
98:69:32:87:a8:12:59:86:ee:f8:8d:57:40:61:34:
ae:8c:65:e6:33:76:b5:75:8b:70:7d:c9:18:47:e4:
1f:29:90:f6:3b:17:42:5b:d8:14:65:13:8d:09:9e:
21:c9:d9:ac:72:c1:8a:af:ce:b0:db:a4:e4:a9:89:
65:17:22:49:f2:49:ba:17:d4:dc:d2:bd:08:f3:eb:
0a:3c:67:1b:01:c3:3a:83:a5:c4:b1:42:37:c8:f8:
8a:97:dc:e1:30:b0:71:03:6f:7c:f9:65:e1:11:4f:
13:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B4:87:38:42:A9:04:F1:A6:97:20:13:93:E7:BA:62:68:42:F4:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/8e291a-b655-46e4-bdc3-ef5ba54adb59/1/ILSHOEKpBPGmlyATk-e6YmhC9K8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.240.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50333
Signature Algorithm: sha256WithRSAEncryption
9b:e3:4b:6e:e9:c6:f3:6b:25:14:06:26:dc:be:82:1a:52:a8:
ed:66:f0:1e:ac:49:d6:2d:c2:a7:38:09:10:3f:de:8b:54:3c:
ac:1a:f5:ec:35:07:b1:65:c0:e2:af:d4:a2:4e:b2:55:c3:58:
6a:08:5e:4d:cb:43:fc:f5:5e:ff:d4:56:81:08:d7:29:d0:36:
fd:fa:ce:7d:83:33:64:ab:0f:0e:17:9b:b6:f2:fc:71:bf:15:
62:fc:9b:99:d9:0b:c5:b1:9e:bf:14:8a:24:55:90:35:00:35:
a8:ce:ab:b6:74:4f:8f:76:55:04:68:8a:95:3a:8d:7e:55:c0:
fd:ed:71:0c:43:1e:d9:4b:cd:55:04:ad:72:4f:d7:96:dc:13:
aa:62:43:a6:2a:30:4b:f7:67:e6:94:e5:5e:9f:a7:ac:75:fd:
60:f9:ba:52:c1:1a:0f:a4:08:89:fd:c0:2e:db:48:e0:d4:70:
45:7a:12:03:1e:d2:59:58:a7:d4:df:46:52:16:b0:f0:f4:69:
b9:f4:70:b8:97:6f:a0:b0:0d:2e:ed:6f:67:de:25:94:c1:97:
20:4d:25:60:ae:d5:39:ea:20:a2:14:6c:47:58:d4:40:36:9d:
b9:7f:58:30:84:e2:b4:af:ad:e5:11:55:53:e0:5d:a9:36:80:
75:53:c9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:17:54 2025 by rpki-client