Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
File: X4KumjBKwILBiiiRZm9kzugdXKg.cer (raw, json)
Hash identifier: bWJeBUwUmdBZwISrXTU45MJzE7uIYhCngjk7RYOpW5s=
Subject key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144093FBF8F5C8EB3A8F39F49E1D3F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41730
IP: 193.201.240.0/22
IP: 195.214.248.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:09:3f:bf:8f:5c:8e:b3:a8:f3:9f:49:e1:d3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:a0:e7:e1:a9:77:f3:e6:b2:0c:8f:42:22:
75:04:23:bd:8d:c7:fb:f5:5e:b8:47:53:2f:ff:95:
c2:7a:c2:c9:ed:1a:6c:b0:d0:e3:20:fc:2f:b3:f8:
f9:4a:0b:3a:4d:23:d4:36:32:57:57:23:a7:b2:00:
7b:6f:e4:69:7a:8c:dd:1c:43:e2:63:42:6e:2c:6e:
82:7c:fb:5b:a6:03:26:c8:c0:66:e6:78:50:c1:c3:
4d:b9:00:c3:9a:fb:38:89:d0:f8:73:da:5a:c2:0e:
86:ff:8f:52:42:2e:3c:90:79:22:15:14:bb:39:93:
00:e2:6f:cf:c5:fd:08:69:6f:65:57:ee:08:db:a3:
ac:53:7f:d4:46:e6:9a:6c:2c:13:f8:81:db:29:1f:
a6:62:3e:00:b8:5b:42:05:d6:eb:b9:25:0a:50:51:
b0:0a:1e:b9:0d:2d:68:3c:14:0f:94:a5:c0:f3:8b:
90:3e:8e:7e:ee:60:d8:f9:60:d3:9d:20:5c:55:00:
d2:bb:17:12:70:ba:6b:4d:bb:1a:46:3b:a7:ad:01:
da:c8:bb:b6:9a:bc:de:bf:be:7d:dd:fb:89:00:59:
19:e6:3e:63:89:fa:ca:cc:94:0a:d6:5a:01:ff:fd:
32:34:4c:ee:4b:f7:e0:b5:1b:ca:03:bc:fd:25:7a:
43:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.240.0/22
195.214.248.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41730
Signature Algorithm: sha256WithRSAEncryption
b0:45:bd:f4:ac:50:12:ad:8d:f2:d1:8a:44:55:75:e6:01:b3:
42:db:03:72:87:fc:41:ab:6a:35:7d:0b:4a:af:58:08:7c:fe:
cb:91:67:38:24:6d:0b:ed:da:7b:ca:4c:c6:41:0e:34:ac:01:
75:09:39:df:f1:87:eb:c5:bb:50:e4:a4:9b:a2:28:75:39:fe:
32:3e:8e:00:cb:c3:ef:ac:10:28:d0:bc:97:22:40:63:01:c9:
17:d3:e8:90:0e:89:3e:f4:14:f8:f8:37:d4:bd:53:f2:5b:4e:
8a:5f:a1:60:be:e0:3f:12:a4:3b:ac:bf:79:94:d2:d3:94:cb:
40:a0:e0:ce:a6:90:55:5e:42:01:0c:cf:1e:d1:bd:9a:71:19:
11:9a:b9:ea:6b:75:7a:d0:67:ba:55:5f:cc:40:8e:b2:0c:7c:
b0:27:5c:a6:b6:95:05:9d:b1:a8:ef:43:36:a1:2a:d7:3d:a1:
d9:e7:0d:22:2d:75:7e:2f:b7:1c:eb:50:18:8e:e5:b1:95:43:
a2:a1:81:08:a0:af:b1:30:1b:58:07:d7:d4:20:b6:24:ee:c4:
31:18:c7:50:83:dd:3c:67:09:8e:3a:82:f8:01:f5:55:f7:0c:
36:e3:c2:89:3f:dc:61:4e:c3:29:1a:68:fd:52:b3:37:e7:72:
2d:f3:ec:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 22 21:46:13 2025 by rpki-client