Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.cer (raw, json)
Hash identifier: AoqoZ6U+AsumwJdsj87VpbC2ZHsYjXP4VZNL4vFpqPc=
Subject key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195F694C3B179182687AD7276560057706D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 02 Apr 2025 12:58:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210892
IP: 5.1.45.0/24
IP: 37.235.120.0/21
IP: 79.135.124.0/22
IP: 94.198.80.0/21
IP: 109.224.223.0/24
IP: 109.224.232.0/24
IP: 185.199.72.0/22
IP: 213.254.180.0/22
IP: 2a11:2b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:94:c3:b1:79:18:26:87:ad:72:76:56:00:57:70:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 2 12:58:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:30:b0:01:51:ce:6b:31:5f:30:5c:b1:12:
f9:a1:50:ce:d1:7b:7f:5c:a5:d9:a4:e7:72:98:67:
32:56:be:ec:ba:d9:88:b6:02:72:7c:51:da:b8:0b:
69:de:8c:b3:b3:c1:b1:5a:3a:e7:89:ea:41:25:ed:
db:f2:a0:10:90:d7:c7:8d:f1:16:39:c8:fb:0f:7e:
6a:bc:91:64:f5:0c:cf:e0:b1:23:46:0e:d1:35:b6:
98:1c:be:f6:74:a1:b9:e4:8f:c2:1a:91:d8:59:2e:
78:16:64:72:1b:b3:db:b0:63:7c:44:2c:5b:90:fb:
d8:69:c7:d6:09:3f:0d:a9:61:db:6a:45:c4:62:a9:
8b:db:19:47:4c:10:7f:b4:16:d7:b4:96:8e:e6:01:
a6:8b:20:6d:fb:b9:90:1f:26:43:1d:7a:f8:8c:17:
7b:98:91:f5:eb:9f:0d:18:ae:7c:a0:78:c8:23:ce:
14:1d:30:48:30:12:60:33:7c:8d:2c:cd:4e:13:82:
8c:a6:12:4b:76:b9:16:a0:d5:92:4d:46:84:f7:8e:
a1:91:24:7b:47:56:c4:ec:2c:1c:14:a9:57:31:a6:
98:72:51:8a:82:0c:b4:76:44:f8:de:de:41:db:45:
67:91:b3:e9:03:09:ce:13:1b:48:f7:9d:68:64:bf:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.45.0/24
37.235.120.0/21
79.135.124.0/22
94.198.80.0/21
109.224.223.0/24
109.224.232.0/24
185.199.72.0/22
213.254.180.0/22
IPv6:
2a11:2b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210892
Signature Algorithm: sha256WithRSAEncryption
5a:0c:29:ff:59:08:f9:73:cc:0b:0e:0e:55:19:67:b2:af:1c:
be:8e:0f:09:d8:41:99:a6:aa:32:f7:60:55:07:bd:0c:e4:6f:
2f:8a:1e:20:66:fc:d4:8f:d3:e2:18:36:7b:fe:cb:39:f1:e7:
18:90:ff:05:4b:58:cb:e8:f2:07:81:90:c7:53:3b:93:a7:3d:
2d:7c:bb:57:0c:ad:c8:86:51:30:b5:3d:f0:10:24:25:0c:c8:
51:f0:c9:4f:24:dc:b2:0d:56:da:e9:64:28:b3:7e:1e:4b:da:
f3:65:3b:95:cb:05:7e:b0:06:c2:73:0e:74:2d:6e:ab:1c:39:
46:4c:05:e1:ef:61:46:da:8b:e9:31:26:e4:ae:57:1d:3a:9f:
d0:d0:14:18:76:a1:d6:a0:30:0a:b2:04:5f:0f:3a:e3:09:0e:
ef:49:bb:15:4c:9e:a1:d6:d3:75:5c:e3:9d:3c:9f:dc:0a:21:
fa:98:fa:8b:2b:4b:5a:5c:4c:4b:b0:86:c7:9d:fc:d3:6d:b0:
ff:29:88:c3:c3:12:e5:24:44:c4:cc:0f:88:06:e8:69:50:07:
44:d4:9d:34:a3:2e:ef:ed:53:62:75:4d:6a:78:7a:e1:9f:31:
39:75:7a:00:4b:47:2c:d4:3d:2b:82:2f:c2:30:fd:45:f4:e5:
13:b7:82:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:35:14 2025 by rpki-client