Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
File: 3Prn1OadQuT0yV2Z9IK5qUTb78g.cer (raw, json)
Hash identifier: zhTBDAspzSJx8c/x7/D75kvr5a2edf8Hf099Lz1rr50=
Subject key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9D6EE4C773BC248B16684BE2FDD9E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212329
IP: 91.236.64.0/22
IP: 185.216.48.0/24
IP: 2a10:a700::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d6:ee:4c:77:3b:c2:48:b1:66:84:be:2f:dd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:7c:9e:4d:c9:61:22:c5:0c:4b:72:f3:55:
c0:e7:89:d1:65:b6:04:7a:be:ee:43:ad:54:9b:0a:
48:33:10:9d:1c:91:24:e8:7a:52:54:fc:9a:15:da:
98:53:ad:24:5b:5e:3d:d7:22:d2:13:03:4d:d5:72:
cf:45:43:05:27:bd:ca:22:a8:23:81:18:d7:1c:79:
fa:50:c1:46:16:bb:04:dd:f4:d3:0a:80:4a:5e:e4:
29:1c:d7:1f:e1:32:47:66:30:ef:28:62:39:10:70:
1a:29:5f:40:11:68:dc:2a:62:70:8a:12:14:41:4b:
0f:88:18:68:1c:e0:35:40:98:49:86:52:03:29:d6:
c4:22:c6:88:53:b3:da:71:d3:5a:06:c8:4f:b1:2d:
53:b1:d2:b2:b0:cc:6b:2c:19:2d:e6:8a:bf:7e:8a:
60:aa:cc:4a:48:1d:24:ab:30:ea:04:f8:d4:f5:6b:
c2:1e:c6:b2:ff:d9:a0:30:0a:73:f4:58:a7:64:7f:
fe:b3:f7:77:3a:cd:c5:10:1b:e2:cd:2e:33:87:35:
4a:ac:54:75:22:d4:63:7f:c7:7b:c9:64:20:5d:e3:
de:e4:02:82:60:ab:7e:fd:1d:36:f4:d3:0e:9b:54:
42:ec:1b:88:4b:34:e7:b5:55:aa:9d:81:0f:17:d8:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.64.0/22
185.216.48.0/24
IPv6:
2a10:a700::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212329
Signature Algorithm: sha256WithRSAEncryption
36:e3:ff:89:a2:76:ce:8c:67:e8:69:f9:e2:04:80:51:7c:da:
c3:aa:24:e6:f0:6c:85:df:6b:fe:50:b7:3a:94:95:ad:3e:12:
a7:85:8e:81:e9:da:45:ec:8e:e0:e8:e2:6e:2d:fd:a1:af:2e:
17:a0:2e:5d:b1:40:01:33:64:38:58:01:39:01:fb:9b:1e:58:
7c:b1:a4:3a:e1:2e:2d:13:94:dd:d4:4d:64:82:83:69:09:cf:
90:66:9d:ad:77:00:7b:b0:ad:bc:13:7a:42:8f:ed:ef:dc:16:
4b:f3:fa:93:2c:c9:95:62:e5:c8:1b:a1:4a:b0:ce:5a:e9:5b:
61:4c:e8:2a:92:c7:33:07:81:7c:19:a2:cc:1c:69:15:30:fb:
89:1f:bb:d2:86:40:87:1e:e2:c3:a3:43:92:c9:10:1e:43:ad:
ec:5f:1c:7b:4b:01:4e:dc:32:20:50:2f:ad:5b:fb:f7:38:cf:
b8:1c:6a:f0:be:29:75:48:24:ab:34:27:ce:28:62:b1:5e:06:
72:fa:15:45:e6:33:bd:ff:d9:27:5e:47:c8:74:12:21:36:a2:
89:7f:36:92:eb:40:11:f9:c4:b0:bf:0f:5a:2f:fb:fc:ad:c7:
36:f8:b7:ff:db:69:15:d2:94:f6:20:42:5a:63:1e:0b:af:72:
f3:44:24:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:57:26 2025 by rpki-client