Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
File: B1lFaGGImKn7cgrgm-0O0b5PhX4.cer (raw, json)
Hash identifier: OyItUpsPLvHe/5PcWR+JpidN8w0RXU9PkqNqgtblayU=
Subject key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D608407AA2BF7F8C1523E5BE22EC67
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 46.254.107.0/24
IP: 195.14.122.0/24
IP: 2a11:b100::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:08:40:7a:a2:bf:7f:8c:15:23:e5:be:22:ec:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07594568618898a9fb720ae09bed0ed1be4f857e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:13:19:87:81:04:47:7b:14:b3:8d:5a:69:
4b:9d:45:17:9b:54:01:9e:d8:0a:cb:33:9a:a8:da:
7d:5a:bb:2d:ee:71:fc:de:59:f3:ab:8c:9b:76:e0:
c3:d1:7e:1e:94:ad:1a:06:fc:04:4f:7c:73:94:29:
29:84:18:c5:49:59:97:00:f8:21:27:19:80:ac:c5:
c2:cf:05:fb:98:a8:c7:aa:29:69:0b:47:d6:60:b1:
5a:3d:13:b8:e7:db:e8:d9:2f:2b:d4:80:4d:8b:1d:
56:d0:9e:4b:58:e0:82:99:3a:a5:82:5b:b0:da:73:
42:20:34:ab:4d:6c:15:5c:24:49:71:84:e3:7a:88:
7a:b6:6a:14:65:df:fb:73:e7:ae:74:86:7c:b3:8d:
c5:d9:9e:f7:40:5f:17:55:be:6b:2b:ff:59:f2:c2:
de:5b:51:a7:7e:09:05:ca:62:d4:bd:0d:0c:ad:c3:
d1:45:c8:3d:ee:df:f6:9b:d6:3a:6e:ad:a6:a6:31:
3f:62:a6:8d:db:df:0b:9d:dc:7a:57:14:9b:17:31:
df:f8:79:ed:44:1e:fe:ce:68:1c:39:5d:bc:2a:3d:
96:c6:c5:80:97:e8:80:22:96:d1:d8:ab:cf:a4:39:
21:36:8c:be:66:79:1e:83:97:24:4a:3c:fd:2c:3a:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.107.0/24
195.14.122.0/24
IPv6:
2a11:b100::/32
Signature Algorithm: sha256WithRSAEncryption
5a:99:3c:b8:32:85:f4:c0:cb:29:9a:ef:76:35:87:37:da:3c:
2e:7a:62:f5:aa:66:4d:8c:9e:ec:aa:93:bf:dd:01:9d:25:4a:
4b:a6:5b:4e:62:a9:b4:18:10:7b:d4:68:db:71:22:4c:8f:bc:
3c:3b:1d:27:cf:4f:e8:37:b9:5c:d5:d7:4b:97:d1:4e:9f:58:
78:2a:7f:86:c0:90:54:d3:6e:e4:f0:60:34:54:8c:28:c5:64:
46:3e:a0:be:6c:78:8c:dd:8b:83:91:f5:96:45:18:3e:eb:1c:
07:e9:48:66:fc:b9:18:c9:5d:9f:7a:68:09:9f:81:a8:ad:68:
c7:1f:8d:19:4c:fe:3d:75:ec:e2:b6:53:8e:7f:71:cb:79:63:
44:aa:27:ae:58:d4:29:14:a3:2f:c4:5b:47:23:8a:4f:37:c8:
2a:b8:57:ca:6e:6f:48:c8:25:25:ef:2b:ae:c1:30:84:d9:de:
af:b7:81:0f:32:99:06:0e:ab:42:a1:36:fc:80:00:1f:28:4c:
66:19:cd:75:16:36:42:42:bf:8d:d4:4a:9f:c7:76:90:ea:e0:
3f:e1:e2:9a:c1:20:45:34:e0:c4:0c:4a:f1:ca:f8:f6:81:b3:
a1:c7:d1:e0:8b:ef:69:f6:53:4a:17:f4:12:23:78:38:cc:43:
06:10:19:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:18:30 2025 by rpki-client