Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
File: 39UkoF1He4L7ypPnpQSqMaOtaGM.cer (raw, json)
Hash identifier: JHn3d6d9Y4aVIcXCeZLpwJWx9PzqUEA+fqTm3JvqP6g=
Subject key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD6A07488C38C6FDADC839E5C70CE9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201021
IP: 185.28.60.0/22
IP: 185.103.196.0/22
IP: 185.106.20.0/22
IP: 2a05:bac0::/29
IP: 2a06:2d00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:6a:07:48:8c:38:c6:fd:ad:c8:39:e5:c7:0c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7d:4a:3f:86:72:02:c6:0e:41:0a:b8:54:0a:
95:6a:dd:9e:aa:79:d8:05:7e:4e:8c:77:80:65:07:
b3:2f:38:e6:f8:c1:e6:bf:a7:58:73:db:f2:bf:62:
53:a3:e5:bc:78:ff:8b:e9:f4:e2:91:8b:c4:18:ec:
8c:39:9b:68:05:04:2d:eb:af:89:bb:bf:61:af:37:
9e:0f:f8:13:cf:92:b1:14:5b:eb:4c:eb:2a:71:c5:
ef:0b:72:95:ff:61:46:32:9e:b1:f9:39:a5:c1:a0:
fe:3b:44:bc:a8:da:7a:1e:93:92:84:b2:2e:02:03:
18:9c:74:b0:0f:e8:ee:19:f4:fd:c5:3d:8d:2b:67:
21:1b:b5:b3:2b:04:ed:09:44:af:fd:cf:6e:2f:03:
e5:cb:1a:14:0e:01:bf:3b:50:15:9e:6f:78:3b:a4:
48:99:71:da:d7:50:01:f6:6c:09:4d:23:d1:07:36:
4f:11:81:7b:d2:99:50:87:d0:78:9c:02:23:b8:2f:
18:8c:83:2e:5f:ea:40:d5:b2:1d:d9:5b:58:88:81:
a5:aa:48:8c:5c:80:b8:ce:cb:96:4e:17:97:f7:e4:
27:74:1b:1e:30:41:59:59:90:91:c9:0e:bb:d8:77:
cc:4a:94:74:e1:9d:de:4e:4a:a1:91:17:b4:21:9f:
8a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.60.0/22
185.103.196.0/22
185.106.20.0/22
IPv6:
2a05:bac0::/29
2a06:2d00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201021
Signature Algorithm: sha256WithRSAEncryption
57:79:36:98:1b:96:d2:e7:bc:e5:aa:09:d8:ea:3a:c9:b1:4a:
00:c8:65:f1:de:ea:a2:b4:66:d8:ee:00:cc:71:c0:e4:36:bf:
6a:92:0f:cf:f5:d4:9d:ad:e8:e5:bc:12:a4:89:11:d7:ff:bb:
e2:b1:57:5f:bd:02:bf:e8:ed:a6:d8:8f:11:9e:a7:91:de:ec:
ca:b3:ab:0e:c4:66:0e:c0:5e:bb:ed:85:00:61:8d:e0:96:ff:
d4:93:ab:18:13:cd:a9:69:da:7f:c0:8b:b8:5f:18:43:f1:c6:
27:5b:d2:9f:55:ee:a9:1b:51:7a:c7:13:89:e1:55:f4:22:68:
87:96:e8:14:06:ef:d6:f7:40:61:68:10:22:8b:ee:88:34:e8:
68:99:64:ec:3e:48:f1:bc:af:1e:67:b6:0e:11:a7:02:49:69:
df:72:ac:dd:f4:ee:67:07:c4:ab:56:47:5b:92:9d:bf:a8:ea:
47:6c:2b:d3:be:48:4f:26:2b:65:6d:a3:2f:7a:d6:48:0c:e3:
be:13:59:10:dc:63:40:48:58:12:d9:23:4e:8e:9c:53:5d:3e:
4a:15:9a:f0:3f:8c:f9:5f:04:2b:7f:9f:47:23:94:97:f7:6d:
fd:9d:2b:34:20:65:12:bc:45:28:c6:ce:b1:8a:16:26:3e:fb:
73:76:0a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:14:36 2025 by rpki-client