Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/987QIfmRTRLUGNmqI4yTgl6l9gU.cer
File: 987QIfmRTRLUGNmqI4yTgl6l9gU.cer (raw, json)
Hash identifier: Cjiih0yb/Bh0gI1mF1nsO1YaodOL88ri1vOgj0FqcUs=
Subject key identifier: F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444EAC91D5016D5900FE35663E3F46C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35684
AS: 206727
IP: 93.188.56.0/22
IP: 185.79.44.0/22
IP: 185.117.160.0/22
IP: 185.178.40.0/22
IP: 194.59.192.0/22
IP: 195.137.191.0/24
IP: 2001:678:b68::/48
IP: 2001:67c:18b0::/48
IP: 2a05:7180::/29
IP: 2a06:8500::/29
IP: 2a06:9300::/29
IP: 2a0a:5280::/29
IP: 2a0c:d980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:ea:c9:1d:50:16:d5:90:0f:e3:56:63:e3:f4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7ced021f9914d12d418d9aa238c93825ea5f605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:78:bf:23:59:7d:24:b4:65:12:64:8f:52:
e9:8f:8b:cf:c1:75:44:e7:03:c3:91:d1:63:af:f2:
13:f4:f4:0d:0b:c3:7e:e9:e2:7d:16:0f:4f:f7:24:
93:e6:5a:2f:2b:36:f9:d3:af:dd:26:32:f0:81:73:
b3:f7:57:60:68:4b:ee:d2:8c:72:13:5b:7c:40:6a:
a8:15:ad:91:8c:4e:91:e5:80:15:27:0d:c1:40:c4:
16:47:14:0a:89:14:10:fc:44:78:50:b6:88:d1:ca:
a8:a4:83:3c:77:dc:34:a3:7e:3e:95:7d:a8:57:d4:
91:8a:c8:c8:cd:35:90:78:eb:2e:8b:20:69:66:01:
b3:bc:8d:c0:4b:de:4e:8e:f4:45:c3:04:fa:05:d0:
d1:5d:12:c1:a5:73:df:51:9d:9d:22:82:ab:a6:65:
41:43:34:c5:7d:e7:64:ce:f1:91:9a:5f:46:de:f3:
32:5e:7f:45:fd:79:0b:4d:7c:fc:38:12:cf:31:c4:
d1:00:be:a9:a7:6d:6c:55:bc:25:e5:31:b5:ab:bf:
88:1d:a0:da:59:51:2d:2b:25:b9:bc:0e:1a:af:b9:
04:b3:f7:bd:46:79:91:f5:5d:ce:3e:ba:bf:a4:8f:
2d:c4:eb:59:1c:63:8a:cd:d3:45:c0:da:22:d1:73:
be:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CE:D0:21:F9:91:4D:12:D4:18:D9:AA:23:8C:93:82:5E:A5:F6:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/7785c3-7943-4b7b-9194-c38661fbf22a/1/987QIfmRTRLUGNmqI4yTgl6l9gU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.56.0/22
185.79.44.0/22
185.117.160.0/22
185.178.40.0/22
194.59.192.0/22
195.137.191.0/24
IPv6:
2001:678:b68::/48
2001:67c:18b0::/48
2a05:7180::/29
2a06:8500::/29
2a06:9300::/29
2a0a:5280::/29
2a0c:d980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35684
206727
Signature Algorithm: sha256WithRSAEncryption
63:ba:76:ea:70:fc:5a:f7:6e:94:33:8f:ce:7b:c2:09:b0:4b:
a3:2b:ea:47:de:3b:9c:3d:01:22:6a:ab:23:38:c0:b5:66:e5:
8e:3d:e3:f4:49:ed:28:0d:01:bd:cc:e5:e4:93:a5:f2:cf:9e:
96:55:cb:ea:60:2b:c7:76:98:79:50:93:78:13:5e:a3:a3:08:
11:a9:d6:f5:00:ef:e1:b4:05:12:81:f8:82:fb:7c:80:0e:98:
f8:bf:47:43:5a:6d:37:fe:8c:f8:87:e8:1b:c1:f5:55:2f:b8:
b5:07:b1:ad:7c:2f:c3:3a:ce:2a:99:0b:c3:dd:e7:25:de:cb:
8f:03:9d:16:1a:03:a7:dd:12:91:66:21:e2:f5:f7:21:89:0c:
a6:17:41:4a:42:42:4e:d4:66:1e:08:da:d5:79:fe:7b:55:ca:
20:37:37:cf:44:99:19:f3:a1:75:bd:75:78:8d:75:99:e1:7a:
55:9d:52:39:d8:b1:80:21:94:11:33:9f:96:78:c5:2c:f9:0d:
ba:cd:84:d4:bd:7d:a3:09:6d:b3:fc:cf:05:12:7d:3f:61:27:
cc:ef:90:fb:c4:8a:06:4d:7b:6f:5e:73:cd:37:3d:42:92:cc:
c4:17:aa:03:98:69:e5:90:6d:b5:07:1c:3c:6a:b0:bf:a8:d1:
d3:b8:a5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:16:25 2025 by rpki-client