Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
File: 152kZWFcYAlDcIM4ktqEyIbhxO8.cer (raw, json)
Hash identifier: cnq4lsVkXekUAj8xpdMqq/+ptjK9iA7+JAyZYhpTPJc=
Subject key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B26DF43DF300D8B4A22EFC15370F14
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 16004
AS: 61968
IP: 185.1.186.0/24
IP: 185.1.231.0/24
IP: 185.188.80.0/22
IP: 217.29.64.0/20
IP: 2001:7f8:b::/48
IP: 2001:7f8:101::/48
IP: 2001:1ac0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6d:f4:3d:f3:00:d8:b4:a2:2e:fc:15:37:0f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d79da465615c60094370833892da84c886e1c4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:1b:a8:24:bc:63:a1:0f:81:af:c6:06:fd:8f:
a0:79:45:82:e5:02:6d:56:8f:fa:8a:67:ec:32:9e:
a0:ca:d2:ce:a7:e2:af:84:26:3f:71:02:63:c2:e4:
6e:81:5b:a3:5c:66:37:46:6a:55:a9:6f:a8:d7:73:
2c:75:8b:08:d2:92:e9:b2:c8:24:42:b4:e2:58:c7:
cd:37:e0:d0:86:f0:11:07:e4:ae:98:37:bb:d0:23:
cd:0a:b2:92:13:ba:78:51:c9:5f:1c:c5:92:3f:18:
45:5b:5c:b1:17:bc:ce:16:8f:ce:41:2c:02:12:9d:
bd:6a:13:c8:c2:f0:fd:79:bf:eb:14:f3:c3:f3:70:
ce:46:c2:75:9b:30:27:cc:70:26:f0:6c:b5:b3:38:
08:72:43:83:af:b4:30:ce:56:a5:cb:40:33:68:45:
f4:24:21:14:fc:9c:43:a2:98:80:ce:b6:94:38:20:
d6:3c:be:c5:b9:45:f8:d5:53:b6:b4:42:77:d9:ef:
a9:9f:e7:fa:cd:3e:f1:ce:9c:b1:fc:bb:ec:55:04:
a8:fb:9f:22:f1:38:13:f0:14:c8:46:cf:68:2c:a7:
c1:2a:72:81:f1:8d:b3:20:40:94:e4:67:2d:d7:3b:
5d:6f:92:93:f7:3d:de:b1:cb:49:26:9c:a7:68:78:
63:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.186.0/24
185.1.231.0/24
185.188.80.0/22
217.29.64.0/20
IPv6:
2001:7f8:b::/48
2001:7f8:101::/48
2001:1ac0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16004
61968
Signature Algorithm: sha256WithRSAEncryption
8c:62:4c:a1:bd:a8:df:d3:4f:d7:52:69:55:ce:77:64:1e:9e:
c0:35:52:99:27:27:a6:3b:22:dc:2d:76:ee:4c:4a:e8:8a:7b:
da:f2:ce:f0:4a:04:42:6a:5e:25:01:2d:78:a9:6c:bc:a8:a0:
b0:83:2e:ea:78:f9:f9:7b:24:35:00:73:25:7b:e6:33:8e:15:
49:05:20:c8:d6:3a:0c:5c:52:5f:f1:6f:0b:ab:53:7b:bb:2c:
a3:13:32:8d:a1:59:fa:b5:aa:8f:58:05:82:b4:26:67:ac:e7:
a7:de:74:3f:db:f6:14:02:01:75:ca:e5:0c:9b:4a:e0:46:40:
88:14:f5:0c:d3:69:82:39:0b:6f:ea:64:44:97:86:3f:c6:9d:
73:b0:cf:da:98:8b:02:df:30:c3:1f:bf:a6:a3:46:f6:20:9f:
7f:b0:ee:b8:8b:e2:db:03:62:b4:1e:56:3f:bc:e9:db:75:82:
e1:7e:f0:14:bb:7a:c5:5a:3e:03:be:85:19:d6:9d:2f:3f:43:
a3:d5:70:52:48:37:8b:8d:ef:28:6c:4a:24:9e:f6:06:bc:03:
d3:e4:32:a6:c6:7d:f0:b7:2b:ad:57:8b:1d:99:f8:e5:4a:8d:
49:3c:2d:57:8e:90:6d:e4:c8:ad:a7:07:d4:ef:15:65:0f:02:
4c:1d:5b:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 22 13:10:38 2025 by rpki-client