Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer
File: 42tMWObP2fp-ciKlizYm23uYUyQ.cer (raw, json)
Hash identifier: hO9VrFAqmtkPpDYXb0aDZLSa37SHJhRVecuYYD08ILo=
Subject key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143815959160D7A1C7B64F10468492C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8275
AS: 43016
IP: 185.121.216.0/22
IP: 195.181.192.0/20
IP: 2a06:a0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:81:59:59:16:0d:7a:1c:7b:64:f1:04:68:49:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:25:a8:a0:7b:e6:26:4d:0f:85:4d:e3:d5:
2f:82:c7:2a:1d:0b:52:09:03:58:10:52:12:7e:a5:
fe:3d:33:bf:20:9e:ad:a8:1a:c2:93:14:3d:74:c4:
ff:44:d9:42:18:0b:d5:76:47:48:45:fd:a3:de:67:
32:22:1a:a8:1a:d5:fa:67:b1:78:27:73:8e:d0:ed:
f4:2e:c9:56:a6:58:c1:b0:85:6a:d9:ef:6b:72:48:
80:af:12:52:80:aa:48:84:0c:c6:45:a4:6d:64:bf:
93:e2:d4:52:d1:0c:89:e2:de:fe:a5:4e:0b:13:52:
28:d3:a7:f9:8d:d6:6b:55:9f:be:15:b4:b5:10:1f:
cc:9f:72:2e:c1:07:a8:1e:2f:45:b4:ff:e7:1d:e7:
bd:d0:d6:dc:c9:d3:3e:cf:f6:e4:29:f6:bc:7b:f0:
b3:e6:36:ce:d7:51:b1:d2:ab:6c:73:e3:ea:f6:0a:
4a:80:1c:6d:1e:a1:d2:ef:48:9d:ff:8f:8e:27:05:
46:64:97:44:76:3c:0b:3b:41:bc:e6:e1:4c:fc:6a:
06:45:f1:99:36:04:a1:b3:3e:e7:6c:ec:71:68:cb:
8f:31:c4:a2:90:21:bc:d2:81:d1:d9:e5:3c:8c:61:
47:3e:87:3b:0e:40:8f:89:64:5f:a1:6b:3c:37:43:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.216.0/22
195.181.192.0/20
IPv6:
2a06:a0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8275
43016
Signature Algorithm: sha256WithRSAEncryption
22:bd:fe:bd:cc:fc:99:b3:31:87:38:92:a9:0e:7f:7c:36:ed:
e8:e4:8c:a7:f8:6e:7e:88:9d:da:5a:32:ac:59:56:0f:2b:21:
48:f7:04:78:26:92:02:7b:b4:b0:20:aa:70:b9:c0:aa:f4:90:
c9:70:08:f4:a2:f9:86:9a:8c:db:d9:07:b9:d7:e1:a8:1b:22:
36:b1:70:67:27:7b:c8:56:3f:20:e7:fd:d8:a7:88:7d:04:88:
42:f0:5d:bf:0e:f2:8b:9e:23:dc:4a:8a:9f:56:58:0d:5d:52:
e6:f5:77:86:16:ec:43:d5:92:bc:44:b4:ad:b1:c9:cc:d8:67:
08:9b:9a:1a:7e:15:53:74:51:75:fa:e2:71:2d:46:f1:47:b3:
8a:3e:5b:7e:2f:c7:eb:08:d7:6f:22:8c:67:8d:53:2b:22:bc:
dc:60:17:03:de:0c:59:bd:3a:a9:ab:71:45:aa:b4:20:a9:43:
3f:81:50:54:55:48:7e:9b:e1:95:54:28:b1:b3:0f:04:62:e5:
72:0c:e7:44:ce:f8:47:83:00:97:de:03:a0:66:89:ec:8c:41:
3a:3f:d1:9e:7e:92:cf:74:ef:bb:c4:3a:f9:dc:a3:3a:e9:ae:
a2:96:90:43:d6:44:e3:59:0b:6e:c8:45:51:f2:f3:db:c7:d6:
76:59:da:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:45:32 2025 by rpki-client