Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer
File: 1-ddGm-DZxLqInT4gJq2K3ELDz1M.cer (raw, json)
Hash identifier: TQ+9l+s8nrNH6BHEo+HAIwO1dtdy1PdBXJ1K+4ZiPJs=
Subject key identifier: F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB04E5927864584566656EA284FBCE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49049
IP: 91.212.105.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:04:e5:92:78:64:58:45:66:65:6e:a2:84:fb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9d7469be0d9c4ba889d3e2026ad8adc42c3cf53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5e:18:d4:98:91:5a:9e:08:d4:71:aa:a5:b0:
64:62:0f:db:61:b2:28:9f:20:2c:84:05:3f:5b:22:
c0:80:74:a6:7c:ce:e2:4d:69:60:80:d7:37:eb:46:
fa:d1:ad:84:e4:3c:cf:35:0b:78:a2:bc:71:ca:ca:
96:44:2c:bb:9a:9f:4a:e5:6e:b7:9b:81:18:e1:cc:
6f:e6:b0:48:9b:77:cf:d4:4d:e7:9a:6f:a4:b3:37:
29:f0:ab:cb:e2:34:a6:93:b5:2f:78:07:e2:38:e0:
be:fe:1b:e8:d1:fe:bf:9b:ee:06:0b:a9:36:b8:4e:
c9:32:bc:70:11:84:45:7c:db:a1:df:79:e6:f2:2b:
de:dc:60:8e:88:f3:87:08:09:8b:26:06:5c:0d:10:
32:61:e1:31:49:94:a7:41:5c:98:e8:e6:e8:78:9e:
51:14:62:e3:a0:d8:69:62:aa:10:1c:14:8d:9f:00:
ac:e4:a2:7e:77:4b:b8:b7:fd:5d:0c:2c:7e:e6:f7:
97:88:3e:e5:63:a7:26:bb:1a:09:b8:10:2f:72:71:
19:c6:b5:cb:86:bd:71:b3:e3:05:b7:24:c1:a5:17:
99:04:0f:0a:29:fc:63:9e:54:6e:3c:ea:8b:ce:55:
60:72:d7:f4:e6:ba:85:8c:a9:44:2f:06:79:5d:1c:
8d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D7:46:9B:E0:D9:C4:BA:88:9D:3E:20:26:AD:8A:DC:42:C3:CF:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/995e4f-cd42-4dc9-ae24-0ec12cfce421/1/1-ddGm-DZxLqInT4gJq2K3ELDz1M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.105.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49049
Signature Algorithm: sha256WithRSAEncryption
7c:9e:a8:9f:07:f1:78:28:c3:e6:a0:6f:30:cd:8a:64:e8:ef:
2c:2f:d8:12:f1:eb:27:a0:eb:22:5d:b5:60:32:0c:fe:70:1b:
67:b7:66:7a:04:d3:f7:28:5c:ea:d2:23:ed:5f:93:d7:12:80:
fe:88:a7:ba:03:dc:b4:0b:17:94:42:9c:07:ca:59:99:d7:eb:
c4:33:1a:74:65:ff:dc:1e:0b:bb:7f:80:e2:ca:d3:b2:28:5c:
78:47:a3:6a:27:c5:d2:97:dd:e3:03:2d:b7:98:09:d1:52:4e:
33:0c:32:00:83:d0:87:04:81:99:0d:6a:cf:95:63:0a:da:1d:
1c:74:74:42:a6:40:b7:78:60:58:a5:5d:ce:e7:fd:68:48:b0:
5c:99:60:f8:3b:45:9d:7c:47:bd:a1:99:1e:82:f6:21:be:fb:
f0:e0:f4:8b:dc:40:fb:1c:d7:9f:cf:c9:6d:75:f5:5e:58:e5:
f4:f7:2e:90:ec:04:ea:bf:47:51:b7:2a:83:01:c9:c1:3f:b2:
d8:e6:e3:0f:9d:e4:f0:76:8d:e7:92:4d:22:11:e7:09:dc:34:
27:fa:83:06:84:1a:d4:0f:54:a0:4d:9c:aa:94:e0:cb:b0:d0:
ed:fd:cf:34:67:c8:af:be:26:ba:3c:40:72:f2:b7:e7:ae:22:
c4:04:93:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:54:16 2025 by rpki-client