Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
File: vgeJVzbtkoYPMTUAioWBP5i718E.cer (raw, json)
Hash identifier: pHvI4LHyCyB4dA6TcjBbsj4zhDOlOFRSNYFT16PdUJI=
Subject key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9D473B8D579C2112C6B619A8DFE75
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205250
IP: 185.224.72.0/22
IP: 2a0c:fc00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d4:73:b8:d5:79:c2:11:2c:6b:61:9a:8d:fe:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be07895736ed92860f3135008a85813f98bbd7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:5d:6a:69:77:28:40:ff:6f:2d:10:a9:49:
7c:d2:e9:02:71:82:8c:30:16:10:3d:0c:7d:d4:1b:
64:ce:fe:91:5a:fa:e3:d5:e3:b3:b1:39:08:ac:5f:
f4:df:cd:c6:81:02:8a:ce:9f:96:32:f7:37:0c:08:
01:26:4d:c4:78:28:53:c2:a1:9a:9d:94:ae:a6:fa:
38:eb:3e:de:b5:61:ff:01:92:e1:50:c8:98:63:70:
4d:d3:d5:ab:9e:61:0e:00:30:37:0b:74:9b:9f:3e:
69:7e:38:12:08:62:e0:2b:d8:dc:f6:ce:67:4f:8d:
d3:2e:a5:1c:03:f1:76:89:35:fd:42:02:73:3d:17:
b7:69:07:ca:74:ad:c0:6d:f2:50:8a:0b:92:a2:e2:
4b:4e:80:a6:cc:56:ba:20:de:41:27:67:17:36:51:
08:65:12:c3:16:5f:df:59:65:9d:dc:9a:9d:c9:2a:
25:8c:ab:e8:a2:ce:17:88:15:04:4b:a6:ee:0b:47:
96:91:5d:1e:72:0c:2b:d8:46:cf:34:6c:c5:d3:40:
cc:65:6c:c6:3f:75:c6:84:b1:29:ce:97:b3:95:68:
5e:2e:af:29:ea:4b:61:2d:59:a2:38:58:e5:00:21:
0a:26:77:63:58:5c:2f:26:f8:05:d6:4b:52:48:42:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.72.0/22
IPv6:
2a0c:fc00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205250
Signature Algorithm: sha256WithRSAEncryption
a1:ac:fe:f8:a0:6c:8c:fb:61:17:28:4d:9e:46:35:82:ad:eb:
8b:ca:81:13:76:c8:b7:92:1b:c9:85:70:e1:46:65:40:8b:68:
78:6e:57:8f:a3:da:42:47:da:02:f7:9f:a2:75:b0:4c:04:05:
53:1a:62:bb:76:22:55:4d:3a:c5:db:00:bc:61:44:c9:7f:74:
20:6c:44:df:4a:1a:d6:f0:44:2a:d1:89:d8:97:91:24:4c:ec:
6d:f8:40:c8:00:b1:c5:f0:1e:12:fa:19:07:0f:6e:28:09:3f:
48:e5:3e:ee:37:66:cb:e1:c7:3b:a1:b4:62:ed:48:54:93:70:
e9:3b:c4:cf:31:5a:19:6d:92:ee:27:ea:41:17:94:88:77:5c:
35:28:d9:78:a4:28:f8:a5:a4:e9:c6:66:ac:01:fc:00:2c:75:
cd:6f:2b:37:4d:0a:6c:c4:16:4d:0c:28:03:7c:0c:3f:f0:fb:
d5:0d:fb:13:9b:25:b7:01:e8:8e:49:88:18:cd:f2:78:9e:6e:
3a:22:34:b9:d2:72:dc:43:77:26:78:3a:ad:b0:a0:fc:9c:65:
16:17:6a:7d:19:0e:57:89:89:79:2c:82:d7:a6:9a:63:0c:7c:
9b:fa:5b:43:a4:c3:73:d2:5b:fd:50:37:47:84:fd:3f:e2:e3:
03:cf:23:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:28:58 2025 by rpki-client