Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07SieHIiWX8W0e5MQ1voaQ8QM9k.cer
File: 07SieHIiWX8W0e5MQ1voaQ8QM9k.cer (raw, json)
Hash identifier: CmLe/eyWe093rgSNqXErms1PAwHW4VksWsYpYgZ88OY=
Subject key identifier: D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D6579C0369EFAD27B62DBD97225671
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206636
IP: 185.179.96.0/22
IP: 2a14:5e80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:57:9c:03:69:ef:ad:27:b6:2d:bd:97:22:56:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3b4a2787222597f16d1ee4c435be8690f1033d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:4d:af:0d:8d:a1:a0:29:3d:38:ed:65:99:
60:7d:b9:4c:6e:7b:60:a7:c1:fb:89:91:82:27:4d:
6f:39:5f:8b:0a:09:2b:74:ac:20:4d:13:2f:68:69:
67:27:ff:e3:a3:9a:ea:f7:09:44:f2:1e:7e:cb:38:
54:1f:71:0c:36:95:c4:ae:8d:4b:7c:09:e0:6b:94:
47:6d:e2:29:7e:9e:f5:a8:8e:6f:26:08:86:a4:e3:
52:f2:be:77:4b:98:e1:9d:eb:5a:3b:8f:9a:90:1f:
e3:74:06:c1:19:3b:5a:f0:50:bb:b3:45:a7:83:f2:
1d:0f:3b:ab:2d:b4:f5:ff:d5:da:61:60:71:e7:ee:
df:ab:aa:3d:99:5a:4c:e0:96:1f:f0:7b:7c:1b:c3:
10:28:e1:43:81:3e:ba:f4:29:9e:c6:c8:06:9e:18:
53:49:8e:1c:88:bf:52:61:0b:b0:13:02:76:2b:16:
64:1f:ca:05:bf:a7:10:1a:93:ee:de:cb:eb:5e:8c:
63:3b:40:72:96:b7:3a:78:20:02:c0:d8:e7:b7:c9:
94:7e:8c:0e:bf:1e:04:9c:72:4b:29:e7:2c:25:0a:
d1:12:ff:3e:69:d0:8f:e0:4f:fe:a7:98:c9:9a:7e:
65:1b:fa:16:42:f7:4b:c4:4f:f5:3b:2c:72:ce:65:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B4:A2:78:72:22:59:7F:16:D1:EE:4C:43:5B:E8:69:0F:10:33:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/39ec8c-4841-4dd1-808d-7be873417d76/1/07SieHIiWX8W0e5MQ1voaQ8QM9k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.96.0/22
IPv6:
2a14:5e80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206636
Signature Algorithm: sha256WithRSAEncryption
ad:a2:42:92:f4:ba:42:33:69:56:f5:16:0d:06:84:2c:71:be:
0a:78:48:ac:7c:dd:d3:3e:e8:92:52:99:05:80:bb:a8:3d:28:
60:e1:e7:7b:36:4d:53:d0:45:69:31:ee:56:c4:60:3a:c1:9e:
a7:5e:8d:a3:ad:76:5f:2f:46:e0:58:d5:82:7b:86:b2:c6:c3:
0d:04:0d:ff:4c:2c:c2:12:d4:06:af:2a:1f:79:50:ae:76:67:
7f:8c:23:c2:24:a1:52:b5:ee:7b:c8:3b:8a:d4:4c:de:f8:40:
1a:22:9c:c4:1d:19:e1:95:f6:ec:11:eb:d4:30:83:be:39:03:
6f:33:be:89:7c:c5:6a:ca:80:e2:b9:67:06:c3:08:83:d0:b4:
d6:4a:ee:be:08:ad:00:2b:f8:67:8d:b3:ee:b3:29:1e:8b:58:
4b:7d:43:43:5f:03:83:b5:2f:d0:85:dc:3c:48:6e:cf:54:93:
30:ac:ad:9a:c6:63:ee:ef:7f:f0:6b:da:79:ad:08:a0:94:d5:
c2:76:9d:28:86:56:76:4c:33:63:e4:72:b3:ef:01:a2:50:cf:
b7:df:f6:aa:58:cd:0a:73:5b:3e:59:90:e4:c6:0e:71:e2:ad:
ea:17:9a:f5:5c:1c:c7:fe:c3:54:cb:f0:5c:e1:fb:ec:cb:c5:
29:80:07:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:21:03 2025 by rpki-client