Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y0FqyaIZN3iMrcd7ep-JttTFWko.cer
File: Y0FqyaIZN3iMrcd7ep-JttTFWko.cer (raw, json)
Hash identifier: /P0XDw4TfqjvQ2px/zA9pLFMM6dlj3G7hAGe6Qi8sqY=
Subject key identifier: 63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B36666327F613BDB73370D4645286A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.222.144.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:66:66:32:7f:61:3b:db:73:37:0d:46:45:28:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63416ac9a21937788cadc77b7a9f89b6d4c55a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:de:4a:2e:c7:a2:86:82:a8:14:a2:f3:7f:
91:ca:71:c9:42:6d:03:48:71:7d:f0:bc:7d:60:30:
72:64:d3:95:5c:bf:95:29:b4:fa:53:01:c7:7a:08:
d5:c0:e3:3e:9d:c5:30:02:d0:5b:28:29:cd:9c:3b:
8f:ff:b1:53:65:eb:3b:46:ee:c7:f2:21:0c:69:c4:
55:a9:24:0d:43:13:a3:46:bf:2e:76:a1:61:96:83:
27:43:8d:c5:7c:ea:82:00:60:32:8f:14:85:83:d0:
ed:a7:2e:8e:f6:ae:f0:aa:0a:ed:69:fb:f5:1d:c8:
f1:4f:4a:f1:b1:85:f5:b8:54:8e:de:9b:36:d5:cd:
ca:5b:e4:33:d5:02:92:57:00:f3:02:ce:2f:d2:90:
aa:10:d1:e8:02:c1:f4:3a:88:5e:8b:34:43:ed:6c:
71:4c:53:21:fc:a9:72:4b:19:bc:6b:3f:33:66:d2:
c9:b2:35:f1:ff:87:b9:7a:7d:44:cd:bd:e3:eb:d1:
cc:6a:67:33:86:2f:01:d5:08:85:0f:0b:f4:6a:26:
1a:fa:54:cb:d6:0b:7a:b1:4d:18:3c:66:68:47:d1:
2e:73:82:e5:e3:78:56:2d:48:4a:4d:15:e2:ef:19:
ad:1d:eb:c8:12:83:db:a0:05:57:91:a9:ad:26:8a:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:41:6A:C9:A2:19:37:78:8C:AD:C7:7B:7A:9F:89:B6:D4:C5:5A:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/83607f-14b4-4217-b6cd-b7bae910c7ac/1/Y0FqyaIZN3iMrcd7ep-JttTFWko.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.144.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:84:c5:e5:d9:84:0a:c1:6b:24:29:6e:01:e0:4a:05:87:e5:
b9:85:92:1f:8c:ca:74:9b:94:d4:f3:5f:11:c2:85:b7:2e:7b:
9a:a4:2c:1a:0b:92:7f:ac:5f:e1:1c:0d:2e:2f:dd:56:a4:d8:
5d:d1:f2:01:1d:70:97:f5:8a:f6:f7:f6:bc:b6:7a:40:cd:f8:
f5:f6:a8:d1:ba:05:0b:3c:e9:60:9b:08:18:bd:47:ee:48:43:
e1:67:df:30:1c:94:0c:e5:69:31:a2:83:a4:62:e4:f9:19:1d:
73:04:69:71:4f:27:1c:df:7a:4f:a3:0d:71:f5:68:9c:da:83:
09:26:d3:fe:9b:b2:57:ba:36:2f:c9:02:dc:c0:41:fb:6b:14:
7b:0d:5a:0e:b6:e5:b4:5d:55:1f:21:f6:dc:ee:5e:80:a1:57:
f8:c3:d5:a6:8e:63:3f:cb:d0:a6:7d:ce:7b:9a:4b:c8:43:81:
0b:d2:d3:15:fd:e7:27:e6:54:f9:d0:6a:66:b4:b0:04:f4:64:
f9:17:02:c2:bf:61:40:e0:c2:fa:7a:97:06:3a:bd:60:ef:50:
38:d7:f2:c2:8b:81:20:5a:e9:e1:1e:3c:55:c1:04:f5:6b:05:
37:2d:29:1f:ed:29:5c:0b:d1:43:57:99:31:a1:a2:45:e1:b1:
6e:fa:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:20:49 2025 by rpki-client