Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
File: Y9krglYVmJTSubJfTYWYbBcnI8M.cer (raw, json)
Hash identifier: k1XSpzTaOXI9B19hQWmulDSdhSxtREMatQv3u9XDdAU=
Subject key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444D223B0EAF6EE9650F340F9BE5C98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29033
IP: 81.20.32.0/20
IP: 185.129.176.0/22
IP: 2a00:1fd0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d2:23:b0:ea:f6:ee:96:50:f3:40:f9:be:5c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63d92b8256159894d2b9b25f4d85986c172723c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:36:68:73:fb:48:1d:ee:dd:18:38:eb:9c:
82:29:e4:d0:83:99:b7:cb:9f:f8:c5:bb:34:3a:58:
cc:87:05:82:72:76:62:02:82:3a:ee:a9:c0:e6:c4:
a1:62:cf:03:2d:70:06:22:10:3f:ca:f4:81:41:43:
b9:aa:6f:e7:46:8f:0c:36:d5:da:a2:d7:d1:ad:0f:
79:78:b4:e8:a0:a5:d7:0d:af:bb:f4:1a:3d:eb:f8:
91:a1:bf:ba:41:96:f5:2f:ea:f2:73:50:b8:b8:1d:
c9:80:b2:88:66:90:1f:be:fc:36:32:ad:57:ac:b8:
25:60:c6:3f:6c:5e:4d:c4:52:08:c0:9e:a2:b9:d2:
a7:44:d0:fd:2d:b2:84:03:51:95:f8:40:40:2b:4f:
54:9a:2e:44:82:02:31:32:c6:96:3c:95:dc:57:16:
56:56:73:b4:70:51:89:38:aa:a3:05:9c:ee:c9:c1:
33:3c:fb:71:5f:a5:b1:d4:fa:a0:c9:4a:e6:7a:f9:
45:f3:73:3a:76:b8:03:e2:15:41:69:dd:ca:d8:a3:
fa:cf:89:d9:be:da:41:a0:da:ba:43:ad:03:1c:c6:
a5:a0:08:0d:57:df:b1:f1:09:45:95:d2:5e:de:50:
6b:aa:cf:12:b3:b7:80:f7:3c:43:5f:26:33:5a:ec:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.32.0/20
185.129.176.0/22
IPv6:
2a00:1fd0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29033
Signature Algorithm: sha256WithRSAEncryption
2b:4f:95:37:5d:b4:d6:60:ed:01:e3:dc:5f:10:33:60:5c:c2:
a2:f7:71:33:1d:16:30:02:04:84:dc:07:4c:c8:5b:fb:dd:de:
c2:24:44:04:e5:5e:55:b3:d5:87:07:61:da:29:26:82:8d:bc:
3c:88:ff:aa:f2:4d:85:95:4c:74:4d:fa:bd:4e:83:b7:95:89:
3b:8f:3d:0f:8c:22:01:5b:62:18:fa:b3:57:5b:1c:f4:d8:35:
df:c2:9e:f8:64:bc:7f:41:ae:1e:3b:ce:e2:c4:ab:4e:e5:93:
fb:24:25:8f:51:96:38:d5:e7:41:96:5e:b3:db:56:a2:ee:12:
1e:82:35:4e:f4:c1:b2:6a:03:ce:d8:2f:b6:0f:28:10:51:83:
3f:29:00:12:81:37:62:91:86:71:9d:2e:c0:de:00:12:29:91:
c8:f7:67:27:25:f9:b1:eb:58:00:82:07:49:17:31:21:f9:fe:
6a:4d:53:7e:90:be:4e:cf:6f:6f:fe:a6:40:6f:88:6d:77:0d:
08:d0:44:ea:fb:08:23:e5:6c:27:7d:f3:38:a3:c6:85:03:f1:
60:48:f7:8e:c7:cc:af:ce:6a:16:6a:ce:ed:f0:26:db:62:0b:
24:fe:d2:2b:e0:56:42:b1:ab:cf:97:a5:5e:10:11:ff:38:96:
69:30:1d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:21 2025 by rpki-client