Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ypzNgwt-AzCL9c8l5np_wr3glXw.cer
File: ypzNgwt-AzCL9c8l5np_wr3glXw.cer (raw, json)
Hash identifier: i0KXmTn8JSv1XY7zk6PsT4cITyRxC8eqNXM37mHpYN4=
Subject key identifier: CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B666507F6B7C05FFD8FF259AD25361
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 85.209.148.0/24
IP: 88.218.64.0/24
IP: 91.236.154.0/24
IP: 193.33.86.0/24
IP: 2a09:bb00::/29
IP: 2a0a:c380::/29
IP: 2a0a:f580::/29
IP: 2a0e:4fc0::/29
IP: 2a0e:7f40::/29
IP: 2a0e:fb40::/29
IP: 2a11:1640::/29
IP: 2a11:2080::/29
IP: 2a11:3340::/29
IP: 2a11:4640::/29
IP: 2a11:5880::/29
IP: 2a11:6500::/29
IP: 2a11:65c0::/29
IP: 2a11:85c0::/29
IP: 2a11:8f80::/29
IP: 2a11:acc0::/29
IP: 2a11:be80::/29
IP: 2a11:c100::/29
IP: 2a11:e540::/29
IP: 2a11:f180::/29
IP: 2a11:fb40::/29
IP: 2a12:1140::/29
IP: 2a12:1800::/29
IP: 2a12:1cc0::/29
IP: 2a12:3b40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:66:50:7f:6b:7c:05:ff:d8:ff:25:9a:d2:53:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca9ccd830b7e03308bf5cf25e67a7fc2bde0957c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:71:f0:35:a0:fe:79:7e:69:22:3f:36:bb:
e3:25:42:c1:6e:88:3a:d8:a5:c6:cc:68:3d:ae:73:
13:b6:7a:2a:cf:89:61:0a:4a:05:39:84:04:8b:00:
d0:2e:19:70:ab:dd:ed:cd:c1:74:69:05:be:e2:00:
a4:d7:e1:00:02:37:43:84:3d:f0:bf:ed:b3:13:59:
6e:e6:96:93:96:bb:cb:f4:80:51:ea:96:55:5f:01:
3a:a7:16:b9:76:2b:65:e4:e4:47:f7:b1:88:fc:6f:
91:5e:82:f1:75:b4:3c:f1:6e:f7:ca:16:3e:9d:3d:
72:73:1e:1c:cd:cf:85:ba:4c:ed:e1:ad:ca:bd:75:
89:06:e1:6f:fc:88:be:3d:1b:91:17:61:3d:b6:de:
4a:f1:ba:41:21:eb:cb:19:4f:04:61:43:17:a6:f0:
78:f7:22:92:1d:a1:a3:04:0f:89:a6:2c:d4:fe:4f:
dc:88:12:78:5f:d0:06:7c:c5:df:45:62:1a:27:b1:
fb:50:3d:a8:37:6e:8e:aa:66:4b:b7:a6:dc:e7:b6:
30:c9:d9:71:6a:ed:71:55:c0:d1:f1:2a:0f:62:79:
0a:fa:54:13:a8:83:c0:20:db:03:ab:e3:50:b8:7e:
6f:c3:94:76:d5:d5:ac:1b:eb:2c:0a:10:ad:2d:42:
46:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9C:CD:83:0B:7E:03:30:8B:F5:CF:25:E6:7A:7F:C2:BD:E0:95:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/a68f21-9ff8-4a44-a36d-d1cde2465f89/1/ypzNgwt-AzCL9c8l5np_wr3glXw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.148.0/24
88.218.64.0/24
91.236.154.0/24
193.33.86.0/24
IPv6:
2a09:bb00::/29
2a0a:c380::/29
2a0a:f580::/29
2a0e:4fc0::/29
2a0e:7f40::/29
2a0e:fb40::/29
2a11:1640::/29
2a11:2080::/29
2a11:3340::/29
2a11:4640::/29
2a11:5880::/29
2a11:6500::/29
2a11:65c0::/29
2a11:85c0::/29
2a11:8f80::/29
2a11:acc0::/29
2a11:be80::/29
2a11:c100::/29
2a11:e540::/29
2a11:f180::/29
2a11:fb40::/29
2a12:1140::/29
2a12:1800::/29
2a12:1cc0::/29
2a12:3b40::/29
Signature Algorithm: sha256WithRSAEncryption
2e:1e:9c:40:5b:3f:f6:ae:5f:b8:1d:7e:6c:29:c0:33:26:41:
e4:13:78:19:34:6e:73:c0:83:a2:77:16:15:6c:9d:2c:3e:05:
06:ca:09:59:ed:d9:14:67:e5:8e:ae:2f:bc:22:b0:26:a4:60:
81:f8:22:f0:26:a1:6d:47:5f:23:79:a5:ac:ea:c3:1f:68:9c:
9d:f9:e0:34:4c:65:71:02:15:30:14:72:0c:10:d5:36:2c:5f:
f4:9e:4d:75:0b:5d:d6:c0:d3:92:5d:3a:c8:a2:de:3b:1e:08:
15:7b:c7:14:74:8d:56:41:48:ba:68:73:a6:89:70:c2:c4:e2:
a5:f2:75:c1:46:55:34:ee:5c:6a:3e:93:ab:e6:1a:4e:2a:93:
75:55:44:4d:78:0c:1d:0e:89:f0:95:a4:36:a6:d2:30:8b:34:
75:ea:e7:30:1a:00:f1:77:e2:28:30:97:ba:66:1f:b3:21:28:
d2:72:1c:a9:a2:18:af:a2:a7:63:8f:b8:03:62:42:91:9f:b7:
86:99:1e:af:c5:b5:3e:83:71:17:c6:f2:c5:81:40:24:d1:10:
bb:3c:9f:d9:1c:ca:25:03:3d:e1:39:f7:d8:04:8b:9d:36:f4:
4b:c1:86:3e:61:2d:28:67:e6:d4:d2:9a:09:d2:71:dd:30:66:
87:86:06:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:12 2025 by rpki-client