Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
File: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer (raw, json)
Hash identifier: vv2nzg9Udj0//cepqVxihJQSv+VVzZnV7HIv65EG1zM=
Subject key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E124ACEFAE0AE0AFE85CD0A8E42A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50689
IP: 195.191.222.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:12:4a:ce:fa:e0:ae:0a:fe:85:cd:0a:8e:42:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed89298644ed486ded509d946a6d6d839589ce11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d9:48:5d:05:b5:dc:36:60:9f:98:67:00:b5:
f1:e0:70:fb:4c:5c:82:c3:4f:7b:7f:7f:12:62:7c:
c6:71:97:ee:02:ed:61:16:21:49:d6:e5:dd:6c:44:
e1:24:45:32:55:9e:8d:dd:b1:d1:e0:73:86:82:97:
20:c4:9f:62:02:c0:cf:60:02:bd:90:eb:c3:15:58:
a7:f1:23:2e:59:e4:5e:4b:fe:f0:49:85:70:4c:77:
62:0f:04:28:90:e1:ed:d2:b3:28:fd:60:f0:de:94:
58:ad:0e:de:68:02:b1:5a:bb:29:6d:69:1b:e5:32:
07:b7:2c:6e:a1:ea:1e:56:fd:d4:fa:36:fe:52:6d:
7b:99:9a:c6:b7:2a:a7:fa:a9:b1:16:c9:5b:b8:73:
ef:ea:a6:f0:ac:2f:23:e4:c8:fc:45:1e:1a:84:9a:
b8:e2:f1:06:fa:84:af:a7:cc:5f:f6:a9:43:4f:40:
cd:9a:58:d7:22:43:c7:34:cf:54:81:88:96:24:81:
5b:2f:d4:2d:25:c2:a1:3f:36:eb:54:5c:2e:bf:34:
b8:70:bb:cf:f7:3f:0a:27:cb:00:b4:e2:4b:14:f8:
75:1e:35:7f:a3:9d:d1:cc:c7:96:05:a5:a3:4f:b7:
bc:c1:62:63:c1:e0:cd:6e:dc:e4:37:5f:6a:4d:1f:
de:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.222.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50689
Signature Algorithm: sha256WithRSAEncryption
3a:f4:03:5a:f9:f3:1f:00:04:0c:9f:d3:22:52:59:80:19:c8:
43:a1:80:76:bf:c9:35:1c:7e:20:7d:6b:1c:f3:28:51:bd:16:
6e:5e:f0:3e:be:e3:7e:ef:cb:33:70:a2:66:d2:21:3d:1b:16:
97:3e:47:ff:58:af:e4:ce:64:2c:7f:44:9d:1d:1f:ab:23:e5:
ec:96:2f:1f:36:f7:68:95:e1:06:16:b4:54:b9:0c:34:13:8a:
2c:86:05:d5:72:31:3f:bc:e5:0c:46:0d:0e:89:5e:a5:40:bb:
12:13:07:bb:29:e9:2b:5b:3d:3e:9a:70:3e:c7:fd:e0:98:52:
ea:bd:7a:65:bb:b0:de:3a:ae:44:b3:63:e8:ef:83:cf:f3:83:
fd:08:42:bb:d1:fd:f3:c3:4c:87:67:0e:d0:e6:a5:e7:23:02:
fb:09:8e:3f:fe:f0:d8:51:f6:9f:22:69:40:2a:37:32:7e:80:
29:e9:52:fa:3b:bf:47:ad:84:44:4c:34:64:b5:c4:83:82:05:
96:72:8f:c6:42:16:20:80:5f:c5:57:e8:fa:d0:58:cc:10:77:
e0:6f:97:00:af:3d:bc:be:2e:50:04:7a:5a:ec:ea:2f:87:cb:
68:64:05:ca:c2:7f:e2:51:5d:f9:56:b7:89:47:20:02:12:a2:
63:9f:a4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:34 2025 by rpki-client