Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer
File: 6XZW8iAVWJ_3zGYFaGf2BdgUSbw.cer (raw, json)
Hash identifier: +qR0xyh2A69H4NpW+JchrLjd186pgNDTH9jq7NhlWuc=
Subject key identifier: E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FAFA340D43D212939C1C8C0F2F323
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204249
IP: 185.37.160.0/22
IP: 185.54.164.0/22
IP: 2a00:f7a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:af:a3:40:d4:3d:21:29:39:c1:c8:c0:f2:f3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e97656f22015589ff7cc66056867f605d81449bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:13:37:e3:24:92:85:8a:94:97:3c:30:3d:63:
27:d0:c0:2e:f6:68:63:e5:7d:0e:8e:f4:3a:dd:a1:
c0:09:9e:ef:26:d4:33:ce:4d:91:ca:d8:c6:39:88:
35:41:0e:14:9e:16:3c:0d:2d:c7:26:dc:1c:45:58:
bc:81:f4:da:c0:90:07:f0:62:8a:09:e1:26:e3:fb:
63:ce:e1:87:bf:4f:79:f4:b0:85:df:4d:8d:f7:86:
20:22:4b:3a:6d:55:c3:25:14:89:31:d7:99:4b:a9:
7f:ed:ba:f3:d0:c6:d0:f3:e4:98:75:86:e2:ab:08:
4a:2e:3f:e3:9b:5f:23:59:ce:ad:41:35:6f:4a:f0:
f4:52:d3:7d:09:8a:a5:97:ea:59:a5:89:83:16:28:
6a:6b:12:73:7e:64:0a:7a:f5:75:00:d5:e2:66:d2:
1e:4d:6b:37:a4:db:b8:cf:17:98:22:75:19:3e:f8:
d8:8c:a3:c2:cb:63:ca:c5:4b:f2:46:c2:0a:c1:2b:
30:5d:bf:d7:31:39:f5:ff:90:97:ec:0f:1b:b6:30:
d0:13:b6:13:47:c9:62:f2:35:90:9f:02:09:24:6f:
a6:72:a1:4d:10:df:b9:a0:b6:f4:8b:f9:68:19:3f:
9b:65:63:61:f3:d9:d0:2c:2d:33:ae:e0:9a:0c:46:
98:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:76:56:F2:20:15:58:9F:F7:CC:66:05:68:67:F6:05:D8:14:49:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8fa051-4357-4d31-8537-6812babc5a8b/1/6XZW8iAVWJ_3zGYFaGf2BdgUSbw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.160.0/22
185.54.164.0/22
IPv6:
2a00:f7a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204249
Signature Algorithm: sha256WithRSAEncryption
8c:93:70:6d:aa:29:23:60:5f:46:0e:39:3d:55:fe:20:00:0d:
48:c1:a1:bb:eb:9b:96:d9:27:4d:6b:cc:d4:80:e6:70:6c:90:
65:aa:dc:98:c0:ca:08:bb:38:97:7a:c4:82:89:2a:f9:f4:9f:
2f:1d:e4:e4:3a:e5:56:a9:56:22:7a:39:1b:c7:d3:d0:ce:ba:
4e:d6:8e:c7:35:6a:6e:53:70:69:b8:1f:89:14:5a:75:eb:aa:
57:14:d4:b3:8e:d9:58:07:52:7c:64:2f:91:09:c5:82:5f:cb:
11:81:da:ca:9a:f4:d4:a8:c1:2b:02:d9:46:0d:6d:08:9c:01:
4f:46:6b:9b:bc:00:43:58:28:72:34:f9:44:23:93:01:60:c1:
42:a2:f4:83:63:10:95:bf:72:d8:7e:e1:24:f9:4c:53:38:38:
9f:ac:da:e5:6e:03:bf:25:b6:c0:98:02:09:17:6c:4c:8c:d4:
9c:19:67:b2:d4:2d:0a:a7:84:27:9b:ce:41:11:42:fe:d7:e9:
91:b0:aa:00:c6:ef:72:fb:13:23:b6:2d:c1:74:69:f1:07:6d:
28:f9:c9:bc:27:c4:f9:ff:bc:ef:61:6d:3b:2c:a3:dd:dc:4c:
06:d5:4a:26:b5:46:9e:26:33:7c:f3:3d:d1:9e:14:0c:f0:8a:
b7:cd:c2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:32:18 2025 by rpki-client