Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
File: 1-yNrIT1WST87B35rQfQuTz34zc4.cer (raw, json)
Hash identifier: REpN8nXexQdWH8ucLZZ139WZb8fWzYUnnQjrGD3ogdQ=
Subject key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA13E13DA74FB51B497FB78304D657
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200611
IP: 80.210.80.0/20
IP: 85.194.254.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:13:e1:3d:a7:4f:b5:1b:49:7f:b7:83:04:d6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:23:9e:88:0d:ce:a7:d8:31:2c:0d:72:d9:
98:0f:32:7c:91:ae:bb:58:04:5c:47:0c:99:ee:37:
be:a7:09:76:b2:67:2c:f3:03:b2:6d:8c:c5:07:7a:
9c:42:56:db:ef:ea:61:06:17:a2:c8:fd:b7:c9:fe:
da:ab:d9:19:c6:4d:47:6f:a1:05:b6:10:0c:19:57:
2f:6f:db:01:fd:22:15:8c:40:66:61:c9:4c:7f:73:
fd:5e:dc:34:6d:3b:ad:c8:55:92:8f:e4:6f:50:34:
c4:68:11:16:b4:a5:e3:91:14:e8:39:36:93:78:4f:
29:c4:09:7d:a7:8b:ca:09:1a:bf:e7:42:7f:28:5f:
92:71:54:af:5a:f2:5e:23:93:1a:4f:e5:ed:de:8f:
e5:16:7c:34:0c:f8:e2:69:a5:92:be:da:04:06:1b:
a9:ab:7d:54:ee:6a:03:12:c0:e5:b0:46:94:ea:be:
8c:58:74:da:dd:23:a1:f5:32:b5:a2:bb:26:35:21:
d8:9f:11:5d:21:f4:7d:8e:da:9a:7b:0c:7b:af:89:
8d:15:43:74:fa:72:90:a9:78:03:77:75:97:8b:17:
b5:ab:12:a2:aa:c1:cf:83:c0:9e:5a:94:f8:b1:69:
0d:2e:9b:61:d5:46:f2:b9:03:36:c2:73:be:0a:cf:
21:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.210.80.0/20
85.194.254.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200611
Signature Algorithm: sha256WithRSAEncryption
79:9e:72:83:e3:83:a7:b5:22:11:30:96:59:a8:a5:f4:00:44:
dd:b2:8e:a7:61:1e:f0:45:59:ee:21:af:52:54:ac:e6:8c:51:
91:00:45:f2:1e:ea:af:4a:00:b2:1b:0f:b7:bb:08:83:b0:bd:
e4:67:14:58:ba:c4:bd:1a:a2:7f:95:35:2e:99:4e:1e:81:41:
ae:67:f7:98:b4:a3:92:16:9e:87:94:18:03:e6:52:ce:57:b2:
f1:a3:d0:0c:29:ff:c9:f6:f2:88:40:f8:b9:cb:09:2f:a7:81:
a7:67:4d:ba:e0:60:a8:4c:3f:b4:24:cd:59:00:fb:43:5d:14:
08:18:75:34:ac:f2:55:26:69:51:92:3c:8a:55:71:93:21:bf:
d1:54:a4:c8:f5:9e:47:6d:5a:60:96:0b:85:5c:2a:d5:89:0a:
87:da:66:a6:71:b8:10:20:41:bd:17:9c:c0:49:13:52:eb:99:
51:a8:36:cf:68:83:c5:b2:3f:3f:6c:12:0c:a2:36:80:1c:2a:
cb:00:cd:2d:b7:95:ae:ee:a5:f3:27:f5:6c:87:ad:3e:9a:63:
0e:7b:ea:9d:42:51:8e:f0:1e:8c:85:a2:49:9b:8d:7b:a0:91:
68:20:29:f4:f4:62:15:17:38:71:a2:68:6c:26:39:d7:89:93:
c8:e7:be:5e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:14:28 2025 by rpki-client