Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
File: 4kLCt011daIop-ZPBAbzo5fHrlY.cer (raw, json)
Hash identifier: vsL2TJuURsFQJjeoeY6wfrQsdqhMkK60+n5jiWS23vk=
Subject key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F7C496DE570158335374FD3A1C207
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57871
IP: 176.110.128.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:7c:49:6d:e5:70:15:83:35:37:4f:d3:a1:c2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ed:ba:ef:3b:af:60:19:ce:75:68:97:1b:53:
8b:cb:17:21:af:3a:8d:e7:f7:4f:83:a1:4e:29:4d:
9a:b6:17:49:bf:13:3b:26:e1:6a:57:34:99:e6:07:
60:61:16:83:e0:79:28:46:14:84:68:30:12:37:3d:
fb:30:13:68:90:a7:a8:c7:bf:2f:43:0d:28:71:06:
e9:6f:d2:87:22:29:03:59:d3:3a:95:0b:1a:d9:26:
66:df:17:ba:4a:b7:c7:37:70:45:97:e6:e8:b1:8c:
5d:d3:6a:58:67:da:ac:63:f6:76:95:cc:c9:cc:ee:
8b:f3:81:52:b1:6a:4c:6d:1c:2d:12:2d:56:39:07:
0a:fc:8a:96:93:f1:42:85:f5:ba:61:33:fa:44:60:
00:8a:9b:cd:77:95:f2:1e:ac:76:4a:c3:35:45:76:
c3:fd:de:0b:e6:63:83:b4:0f:c7:73:b8:c8:f2:d2:
a0:30:2f:8b:a0:d1:d1:8a:8c:b8:b5:54:c4:0b:64:
a3:f7:f3:a3:2a:d1:7b:5b:e0:9b:3d:f1:87:8f:25:
32:a5:25:8c:11:db:3b:e3:6e:7d:6b:a9:b5:0c:c8:
9e:67:0b:74:5f:87:78:17:b1:b8:a7:48:bf:37:91:
32:a6:45:4e:57:5c:cb:e7:8a:ae:a0:b0:54:57:46:
ef:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.128.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57871
Signature Algorithm: sha256WithRSAEncryption
0e:3b:03:05:ad:f1:48:75:13:2e:ff:02:cf:9f:5f:08:c5:ed:
54:d6:b9:77:12:ac:e4:f8:4f:0c:e2:37:56:16:12:ac:79:6e:
f3:20:d0:c2:c1:a2:fc:44:e3:be:74:64:c7:20:d7:2a:0c:a0:
d7:97:5f:b6:cb:6d:15:a3:fe:7a:ee:d2:56:cb:36:6b:ef:ef:
3b:21:40:dc:56:4f:e7:f0:a0:c6:78:a4:b0:99:82:82:e5:ea:
7f:b3:8c:0a:9d:44:6f:8b:89:7b:90:37:20:bc:ac:6a:1e:62:
f1:9a:05:8a:ac:7a:6f:3f:e5:de:dc:16:1c:82:fa:73:2d:89:
91:c8:a1:cc:69:1a:f5:70:60:dc:25:13:37:97:29:4b:9c:82:
48:29:31:03:0e:ea:eb:7d:94:6d:bd:fa:b3:8a:23:88:1b:f1:
fa:c3:6f:84:9e:71:cd:7d:0f:5b:52:2e:6b:cb:bd:69:a6:ab:
c6:7f:11:af:ae:57:82:7d:46:e3:62:c1:ba:ee:ab:8a:ba:16:
b7:d7:74:2f:5c:29:51:91:f4:05:7c:0d:d9:c5:dd:fe:af:b2:
ff:e5:92:db:f5:d0:13:0e:e1:b6:72:23:16:da:e4:e4:65:64:
20:4a:64:6d:e4:4f:4a:29:52:71:10:2a:ae:2e:86:67:b1:d2:
df:c0:bd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:35 2025 by rpki-client