Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SBVxyrg7M5yGCR7HR8ITX85PZYc.cer
File: SBVxyrg7M5yGCR7HR8ITX85PZYc.cer (raw, json)
Hash identifier: AqvVTiCWuhLM1HRz3oe/D1wEL3B+erUCj8+/Vf2OC88=
Subject key identifier: 48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747BFE0D8BA3958A009B109DF656E49
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213007
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:bf:e0:d8:ba:39:58:a0:09:b1:09:df:65:6e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=481571cab83b339c86091ec747c2135fce4f6587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d5:be:2a:b7:54:2f:63:bc:ab:89:ac:45:4e:
ea:4f:7b:c3:7b:d9:e3:bb:15:0d:0a:ff:eb:68:78:
df:d1:06:bc:8e:78:8d:27:13:f5:cf:23:70:2f:e5:
0f:30:94:0c:82:c9:c9:2f:b3:04:64:92:20:d2:78:
bd:dc:b6:ae:d0:54:db:ce:ee:4e:8b:d7:17:64:d1:
f6:b0:97:86:c6:ff:2c:a2:f6:e7:b0:11:78:47:d5:
73:e7:27:86:1b:50:00:bd:df:17:b4:8d:38:0c:02:
07:a6:9f:9f:f7:1f:b5:1c:e9:69:28:63:9c:d7:88:
68:07:00:80:11:42:83:1b:7a:77:f8:f7:a5:4f:6e:
46:c3:34:e7:99:80:dc:75:22:46:a9:ab:ab:b8:bc:
28:81:05:39:74:d9:00:12:26:c6:3d:85:28:62:9d:
9d:f3:48:56:d9:99:e8:8a:54:f7:0c:98:85:b6:53:
fb:53:54:a4:e0:3f:f2:b4:3d:b1:e3:d6:61:b7:b7:
90:25:2c:ef:90:86:45:09:5f:b0:e3:3a:ce:9d:3f:
b8:f0:3b:9f:54:15:18:5a:06:bf:88:86:83:ca:cc:
37:42:7e:80:ca:6b:8d:16:d7:c0:14:3f:ee:9d:8b:
4d:2f:07:d3:12:c9:87:f8:63:fe:49:95:9d:d8:d8:
08:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:15:71:CA:B8:3B:33:9C:86:09:1E:C7:47:C2:13:5F:CE:4F:65:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1c29a-a936-490b-9607-6f39cc6722c2/1/SBVxyrg7M5yGCR7HR8ITX85PZYc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213007
Signature Algorithm: sha256WithRSAEncryption
19:22:bb:f8:a7:7e:1a:11:77:20:e8:0d:93:d2:79:8c:59:0c:
97:e0:d8:9f:2b:eb:f9:2b:a5:bb:f0:94:53:d3:fe:a0:d5:37:
72:f3:e0:cd:fe:f9:e4:7c:08:3f:ac:2e:17:c4:f8:11:9f:70:
a7:8a:03:74:e2:21:4d:96:e9:45:ff:12:8e:ef:6e:10:42:6e:
78:b7:14:12:ee:20:28:37:11:32:a5:98:5e:de:e5:cd:94:92:
0e:6f:b7:f0:dd:74:34:07:d0:a0:96:c0:7e:53:91:37:4a:c3:
ef:60:55:3a:73:de:22:83:5a:37:92:62:ae:72:12:71:41:59:
8b:57:a0:9b:e8:6b:2c:41:ca:82:3c:ba:e2:c2:68:d2:18:7e:
2e:bd:8e:15:f6:2a:b5:b7:9f:00:94:9a:9c:6c:7a:d7:79:6e:
1e:c2:3c:0f:bd:0b:99:37:70:54:ab:13:78:e9:0d:eb:da:3c:
2f:40:b5:1d:6c:78:12:b9:c5:ce:00:b8:0f:11:29:b7:83:c9:
3e:2c:42:8e:07:70:09:aa:ac:f6:f9:b9:9a:35:d0:31:92:6a:
db:07:e5:48:09:4b:b2:c9:d0:9d:98:a9:dd:6a:bf:05:e8:f3:
7f:2b:d2:ba:69:a1:d0:1e:c1:e1:5b:b6:aa:3e:3b:d6:39:27:
26:02:c9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:51:10 2025 by rpki-client