Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer
File: UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer (raw, json)
Hash identifier: xBRgCQX991DcghAZKq8Zsb1BA3ZDgaxh6E8rukvKyLc=
Subject key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194F97BAE5B73FE346EF90B27C6EB6D54AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 12 Feb 2025 09:26:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213531
IP: 78.41.62.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f9:7b:ae:5b:73:fe:34:6e:f9:0b:27:c6:eb:6d:54:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 12 09:26:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51e0dfc9371a9491caa858700fd9452366d9eddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f6:68:f4:5a:3b:de:2e:92:90:78:0e:15:bf:
74:ea:cc:4b:39:d9:91:ab:5e:8c:7e:2a:04:00:b8:
e6:7e:48:7f:cb:1f:31:d7:1a:be:23:7b:52:c9:08:
c0:ff:75:e6:4b:77:8c:b8:17:35:c0:fc:c3:37:ce:
d1:cb:d0:5d:3e:fe:b7:c3:25:80:93:5c:fe:51:37:
f8:d3:dc:2d:d7:b2:93:35:8f:9e:ca:1c:30:cc:86:
88:09:5e:0d:15:7f:e9:af:f9:23:85:81:a6:b9:21:
01:a8:93:57:87:47:64:67:82:e4:07:6c:59:c5:0e:
e4:ab:f7:38:25:b1:ff:99:e2:86:89:88:e8:4e:ae:
06:7f:10:23:4c:fe:6d:6c:97:88:0f:8f:c2:e1:c1:
f8:d9:91:22:e8:30:3a:33:9c:43:9d:cf:c4:40:3e:
ba:52:f8:cb:41:55:7f:42:f4:72:b6:09:87:b5:2f:
09:14:87:ed:fe:70:97:4f:eb:ab:cf:f0:65:d3:7e:
2d:61:81:90:2c:7c:a6:07:0f:4b:5f:49:e1:99:97:
9b:4b:b5:41:09:b1:ff:55:81:df:4b:13:e7:af:7d:
b2:d1:c8:f3:5c:2c:9b:43:1b:c2:20:ca:1c:23:1b:
92:81:15:7d:f0:5b:0a:5d:82:9e:66:be:33:56:3a:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.62.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213531
Signature Algorithm: sha256WithRSAEncryption
8f:0f:0a:78:be:a1:85:62:bc:c7:d3:a1:a9:98:26:07:73:d3:
e3:92:8c:42:47:f0:cd:cf:71:db:12:f9:3c:38:48:df:d4:91:
bc:50:db:4a:89:9a:96:af:d6:16:df:30:b0:6c:17:a5:47:19:
5a:95:4a:99:e5:12:48:ff:4b:ad:56:49:a7:4d:4f:07:6d:1f:
ff:ec:58:35:00:0e:67:8a:ac:02:9f:e8:8b:5e:96:9a:dc:31:
64:53:41:2d:ab:93:77:5d:e7:36:e5:e6:3f:bc:c5:c8:d9:9d:
77:2a:27:99:81:c1:dc:70:b7:e7:02:25:51:f6:6c:0f:19:58:
fc:4c:2a:46:d1:76:fc:6d:5d:ec:0d:34:c4:f9:ed:82:42:78:
66:0d:a3:74:f9:3d:5d:cf:d5:aa:08:22:14:2d:ab:ea:61:64:
44:25:bb:94:ff:39:0b:28:5e:ae:a1:ea:f7:b0:65:fc:30:2b:
24:b3:1b:4c:29:b6:44:5e:3f:35:3f:df:9b:2e:28:de:5d:2b:
cb:5f:66:2d:7e:88:7a:ca:73:6b:4c:27:5b:3c:01:77:50:9a:
d6:d8:57:93:c2:4f:66:24:a7:e8:ce:6b:85:f1:37:02:26:c3:
2f:cf:05:52:02:86:11:96:fb:a8:49:21:31:65:bb:34:b4:19:
1a:cd:42:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:38 2025 by rpki-client