Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer (raw, json)
Hash identifier: sgfsAwYm9Ss+BJm2XqkvDTIZtUUpvul3y80Tcl8r5II=
Subject key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C0982D572BEC2067AE7F2964C05D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13037
IP: 51.148.0.0/16
IP: 51.155.0.0/16
IP: 62.3.64.0/18
IP: 77.104.128.0/18
IP: 82.68.0.0/15
IP: 82.71.0.0/16
IP: 88.97.0.0 -- 88.98.18.255
IP: 88.98.21.0 -- 88.98.95.255
IP: 88.98.128.0 -- 88.98.167.255
IP: 88.98.170.0 -- 88.98.191.255
IP: 146.66.64.0/18
IP: 212.23.0.0/19
IP: 217.155.0.0/16
IP: 2a02:8010::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:09:82:d5:72:be:c2:06:7a:e7:f2:96:4c:05:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:03:12:6b:b6:b4:73:15:e1:e2:e2:c4:2e:4b:
b9:39:82:d4:42:20:aa:53:e3:52:05:76:ff:3a:1b:
0a:c0:1d:a4:00:61:ff:bc:c9:df:82:61:57:50:62:
29:30:60:ba:db:84:13:30:eb:50:18:e1:d9:1e:be:
31:c5:28:a9:5a:d7:4c:d2:6e:8e:bb:6c:34:f5:9b:
64:2c:37:07:bd:4e:dd:0f:ba:4c:22:31:f1:07:ed:
6a:d9:79:66:5c:bb:57:2f:1e:20:c1:e3:5f:3c:c5:
c3:18:8b:51:a9:cf:73:30:04:e2:66:41:40:0a:b8:
78:61:b6:d9:08:68:77:f7:93:27:76:30:32:67:42:
e6:25:ac:5e:e4:82:59:50:f4:d2:f1:43:10:1e:bb:
40:57:6e:0b:20:48:da:0c:b3:03:43:8c:5c:29:f8:
20:0b:fb:20:7b:64:19:ed:20:e2:05:ff:48:c6:99:
88:fd:63:2d:6e:87:46:44:c3:2d:cd:8b:fe:d9:5e:
db:d7:9d:da:2b:c3:09:39:55:38:0a:e8:ed:15:29:
d3:4a:d3:1b:f2:7b:2d:bf:2f:59:4c:26:3a:ca:15:
59:7e:85:85:db:8e:5b:23:2e:e2:8a:e8:6c:2e:ba:
bd:f5:3c:ed:80:02:20:fa:eb:21:83:45:1a:4b:e2:
1f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.148.0.0/16
51.155.0.0/16
62.3.64.0/18
77.104.128.0/18
82.68.0.0/15
82.71.0.0/16
88.97.0.0-88.98.18.255
88.98.21.0-88.98.95.255
88.98.128.0-88.98.167.255
88.98.170.0-88.98.191.255
146.66.64.0/18
212.23.0.0/19
217.155.0.0/16
IPv6:
2a02:8010::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13037
Signature Algorithm: sha256WithRSAEncryption
39:d3:9b:e0:63:15:8d:36:67:67:96:f3:af:9d:4d:bf:06:7e:
4f:82:57:8f:3a:34:31:59:31:3e:12:58:cd:0f:22:45:cb:bd:
0d:c6:86:e7:b3:e0:fc:3e:f6:af:1e:c4:2a:52:bb:d1:2b:ec:
02:75:98:3b:ac:7a:65:d2:d7:76:e2:2c:10:5d:22:69:e4:bf:
ad:4a:ab:6d:6e:96:4b:0d:8a:5c:68:cf:d3:3c:ba:08:31:b5:
03:19:b0:37:91:98:77:d4:06:1e:1c:4d:6d:9a:48:4a:ea:0f:
eb:9a:c6:ca:56:d1:66:f0:5a:27:9b:47:1e:88:97:60:30:c1:
e8:31:c1:bb:ae:ec:b0:67:46:81:1b:61:d5:23:01:09:98:b7:
34:64:7a:7e:61:76:ee:e7:51:6f:56:96:be:1d:76:ed:5a:e0:
73:3e:d9:10:ae:ba:1b:ad:0d:8e:5e:01:ac:ac:13:4f:fa:a2:
47:1b:ac:8f:f4:85:55:2e:44:54:50:95:3e:12:fa:b5:27:85:
15:ee:57:31:d0:95:47:3c:ba:64:5d:06:42:3c:1d:8d:34:a8:
55:d8:c1:39:77:91:1c:fc:32:71:a1:d0:e8:60:98:2f:05:8b:
5a:88:45:d4:39:a0:84:1c:7f:88:0d:f3:c2:b2:15:c7:a7:5e:
96:1c:dd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:31:55 2025 by rpki-client