Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
File: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer (raw, json)
Hash identifier: 2S4mbS/6+v/38YfTKON63l2MBEgpPDKrPnCXwBAcDeU=
Subject key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195D9907A5D474C9B6AB7045F9DD48DDAAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 27 Mar 2025 21:44:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216262
IP: 185.45.252.0/24
IP: 2a13:ec40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d9:90:7a:5d:47:4c:9b:6a:b7:04:5f:9d:d4:8d:da:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 27 21:44:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f83ebe2a906dd587012599209c31ce10f29d5785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:06:32:93:ac:13:dc:a5:14:91:32:86:ab:
d7:d3:3b:8a:a7:0f:d1:6a:11:e0:ca:f7:e4:99:bc:
1a:c4:9c:f7:4d:14:0c:28:70:84:b0:e6:43:c2:d7:
38:59:c8:73:de:8d:0e:a9:c7:ab:78:49:9c:22:ad:
bd:52:7b:34:0d:de:da:f6:30:9a:c4:67:ed:b8:e6:
59:1c:d3:e7:ca:6d:c3:a7:ea:50:0e:50:e6:ab:51:
4a:87:9e:58:f3:b6:ea:60:d9:0b:c1:fb:70:08:09:
a4:55:ac:85:bd:b9:e3:f8:cc:40:d9:cc:b7:e9:50:
2d:0b:b0:63:ac:9c:ac:63:29:30:eb:42:64:d6:b2:
d9:3a:38:ce:a6:4e:97:07:6f:9a:e0:6d:75:fc:f9:
01:a3:e0:ff:a4:55:d1:91:d2:fa:8b:9a:03:68:00:
2f:6b:6e:8c:ba:21:72:c5:37:37:57:7d:eb:78:63:
67:e0:78:35:b2:22:30:2d:e7:a0:c9:aa:29:c0:d6:
5a:1f:67:07:d6:02:7a:f1:e0:bf:24:59:05:08:27:
a5:79:68:78:2e:2a:b2:dc:d6:3c:85:60:79:eb:31:
40:1e:de:11:5e:36:16:24:f9:f2:4c:0f:1c:80:b9:
9b:15:f2:0c:71:c9:13:5d:f7:24:f5:4c:2f:ca:10:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.252.0/24
IPv6:
2a13:ec40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216262
Signature Algorithm: sha256WithRSAEncryption
83:0c:b6:b9:15:cc:d0:e5:86:f4:55:9f:79:e4:2c:72:6c:62:
42:8f:40:61:03:52:54:ce:9a:bf:7f:5e:d6:30:89:17:e1:c6:
bf:1a:09:a3:fe:73:d7:0c:d6:0e:c2:36:9f:5e:6f:92:2d:06:
04:4e:71:88:93:f7:4e:82:cf:97:64:f7:96:88:47:3d:5d:41:
3a:98:7e:cf:14:7b:a3:6b:88:4e:20:48:35:ce:9b:ba:22:2c:
ab:04:07:6a:80:d8:0a:ed:ab:65:9d:e1:df:c6:4c:87:0f:fe:
bf:3a:dd:e7:75:ba:6c:23:8e:bc:1c:ff:18:f2:84:bf:80:87:
c0:d8:5e:09:7d:b4:8f:7d:69:dc:f1:69:6d:5e:21:85:87:35:
a8:3d:47:0b:99:85:0a:b0:e8:cb:9f:a2:54:ae:93:12:ad:63:
ef:e1:4f:26:f6:76:c2:5f:9f:9f:7f:95:40:70:68:17:8f:87:
a1:bc:f3:f2:4f:83:31:62:fe:92:f0:67:e2:76:12:f9:36:eb:
08:17:ef:2a:9c:55:d5:7e:81:2c:28:f2:c1:1d:8d:9a:a9:11:
a8:57:20:9e:1b:80:63:3e:d1:a7:17:89:29:12:28:f9:42:06:
e8:e4:53:57:0c:b2:99:a0:bc:b3:6a:87:d2:70:6c:6c:87:8c:
4c:0c:5f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:52:29 2025 by rpki-client