Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
File: k8XxCvi8tfxuNKRztKbK560C2QI.cer (raw, json)
Hash identifier: 3DE2cPnxa3QjDCUgg+5qcx8ivZDLOAjcTtusjNyLr4I=
Subject key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444E323F0272ED70C22CAE0B13AC9A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204954
IP: 91.244.126.0/24
IP: 2a13:4f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e3:23:f0:27:2e:d7:0c:22:ca:e0:b1:3a:c9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fd:c6:4a:f1:37:01:e4:b3:04:97:9f:1f:60:
23:1a:6a:df:1b:bc:d0:49:99:7d:5b:b3:50:2c:42:
8d:4f:51:95:eb:e6:77:9e:65:a2:08:5d:6d:dc:c6:
19:6e:c3:19:60:ed:12:66:e7:f0:24:c2:c5:74:13:
14:46:e5:c1:e4:7c:fa:2b:e1:b2:99:8b:c8:07:d8:
c7:af:a2:d4:7d:96:13:92:d2:f3:0a:eb:0c:77:92:
90:93:f0:41:f1:00:01:ba:48:7c:9b:ef:58:5e:68:
e9:18:d4:f5:0c:f6:4d:c0:df:78:86:b4:87:53:9a:
35:60:6e:df:b4:64:e3:b3:fe:1d:55:5e:bc:22:83:
96:be:f8:ef:0e:99:7e:7c:19:11:06:88:38:d3:1b:
d6:a4:3d:d3:fb:05:16:52:53:26:0a:9e:aa:ea:ae:
58:65:ae:39:7b:8f:ca:03:f9:3d:f3:4c:c0:dc:df:
1f:96:bb:5e:ee:af:23:d5:e3:53:79:63:78:0c:15:
91:94:a3:91:ba:44:7e:30:14:9a:82:14:d3:1a:be:
e7:24:66:a0:bd:a5:95:3f:b3:1b:3b:9c:d3:b7:1b:
95:dd:95:ed:c4:aa:1b:72:01:99:56:14:d6:de:f2:
0f:b6:e3:af:1f:61:50:b3:1b:ab:fd:db:45:4a:92:
cb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.126.0/24
IPv6:
2a13:4f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204954
Signature Algorithm: sha256WithRSAEncryption
1e:d3:66:db:ea:8c:79:7b:10:1c:4f:99:54:48:94:4e:91:d6:
76:16:a2:ee:c8:59:1b:1e:4a:03:c3:91:05:44:34:c6:66:c4:
5b:19:76:5d:35:5f:ec:7e:8f:19:19:88:12:d9:01:19:53:2b:
cc:18:be:07:6b:3f:fc:24:5d:78:5d:e7:86:0c:c4:20:0e:74:
82:3e:35:27:de:9c:ad:8f:c9:21:33:45:70:11:6c:89:8a:82:
27:c0:30:8d:a9:29:10:35:ac:64:e5:5d:b7:22:7f:dd:d5:82:
84:f1:98:62:2f:4f:c6:e2:2e:eb:a0:99:c6:e9:1d:c0:c9:66:
1a:db:cf:2d:68:a4:41:e4:46:07:f8:9c:2e:86:17:a7:61:89:
b7:19:c7:25:75:d8:44:53:f2:92:2e:a5:c6:58:a6:6a:a9:30:
62:e7:07:09:53:7f:bf:85:59:54:a1:e9:bb:2f:e3:a3:b9:f4:
48:30:8a:8f:6d:da:63:e6:1e:46:c8:6b:73:37:42:bd:ab:57:
0e:35:88:4a:76:8b:46:0e:1c:99:da:03:67:07:53:5b:a7:d8:
a4:5a:05:95:7f:f8:62:7e:b7:fb:7c:25:b0:52:5e:ca:8e:f1:
1c:42:48:cd:94:43:d8:87:3a:48:9b:25:ca:b0:0f:f5:8b:13:
78:28:08:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:29 2025 by rpki-client