Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
File: 7512O0ngJKe2oZ6vffuYkRqclMg.cer (raw, json)
Hash identifier: 1jef4Ylb/JuC4J01MJMaPL9sdrpN1JDNxyn0QylNDWI=
Subject key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427480F3ED6E2F4416B9662F142FD186D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212798
IP: 5.182.20.0/22
IP: 2a0e:b800::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0f:3e:d6:e2:f4:41:6b:96:62:f1:42:fd:18:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:99:c0:16:74:c9:5d:3d:7c:08:24:28:8b:
ae:c0:94:20:25:16:10:32:fa:88:4e:1a:b6:2c:5b:
dd:a0:c1:cc:69:5e:0e:fb:9d:64:b1:d9:0e:29:45:
e1:3e:10:88:eb:da:01:fd:e7:5a:1e:db:d3:a0:e3:
1f:5f:d9:2a:6e:ba:b3:73:8e:19:6d:9f:50:31:b3:
63:d4:b6:fa:5f:53:93:eb:c4:42:a2:c4:67:63:ed:
16:9e:83:de:cc:87:62:34:29:f2:9c:d2:d4:f0:04:
c4:3b:71:0b:c7:9b:87:dc:fd:eb:6e:6a:28:61:05:
53:a6:f9:c1:83:8c:1a:f1:0c:e7:12:39:9d:11:80:
ef:12:7c:48:0d:ab:af:e5:b4:22:bd:5c:f7:cc:10:
b1:25:43:1a:a5:49:80:89:c3:3e:0d:b6:6a:da:5e:
cd:94:49:5c:09:88:71:4e:cd:f2:b9:5c:99:8a:7c:
f2:f6:42:1e:97:68:2a:f6:31:26:a3:44:63:ef:40:
d1:2e:87:0d:74:a8:1d:2a:a9:1b:a5:65:92:8e:96:
86:b9:7c:ac:a8:ee:1a:be:a6:ab:c0:6b:ab:6d:fd:
a2:2f:75:6f:63:89:ac:3e:40:c8:99:31:b5:9e:5c:
cf:61:83:45:69:e8:72:83:a4:18:3b:ab:70:3f:c6:
31:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.20.0/22
IPv6:
2a0e:b800::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212798
Signature Algorithm: sha256WithRSAEncryption
86:4f:1e:9c:0b:ed:11:f4:84:d1:93:5b:9e:07:e1:b5:f8:4c:
c1:5a:b8:0d:51:81:ed:fb:bc:15:76:6e:e8:f8:77:c6:92:c3:
2a:93:7f:27:06:f5:f3:6f:ce:18:a4:ba:ff:67:af:ae:dc:3a:
24:25:cd:b3:b1:3c:43:84:c7:50:d6:3f:34:4a:f4:16:14:ce:
ef:74:a3:f0:96:ca:85:73:38:8e:27:49:ee:cb:c8:1a:9f:73:
39:35:78:8b:4d:c6:5f:af:7e:da:7c:af:0d:c6:2f:ef:e0:f9:
32:a8:a6:a7:5d:60:5a:62:4f:c6:7f:ca:0c:03:8d:24:5f:2b:
fa:1f:89:7b:16:44:a6:66:8f:d1:c4:c5:ad:82:2d:61:10:fc:
f8:65:dd:3e:1c:61:ba:e0:68:4f:ec:29:47:1f:8e:6b:ac:0c:
6a:f1:c5:2b:da:c5:4d:bc:ba:1f:63:56:28:6c:7a:d4:48:e9:
bf:dc:31:fd:db:1b:27:2b:67:1a:98:1d:01:d8:78:bb:ef:a1:
59:db:cf:d3:aa:d1:6c:32:b2:e4:77:3d:3e:77:bd:b0:32:8c:
98:a9:31:3f:8f:db:89:45:84:6a:bc:04:7f:35:ba:95:4c:3a:
98:f5:be:2d:41:0a:7e:0f:95:a4:45:69:71:62:6c:d1:08:e5:
62:94:d1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:04:25 2025 by rpki-client