Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/COfXs7xMB5HAz_4_FVWrdz4-0W4.cer
File: COfXs7xMB5HAz_4_FVWrdz4-0W4.cer (raw, json)
Hash identifier: +IG+M8eSru2K1WJK1KjjSaFIOL9IASKRC7P3xccP4Mk=
Subject key identifier: 08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196A5CA9BAB15947E8122C9B245CB446E2E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 06 May 2025 13:30:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199102
IP: 93.189.224.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:ca:9b:ab:15:94:7e:81:22:c9:b2:45:cb:44:6e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 6 13:30:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08e7d7b3bc4c0791c0cffe3f1555ab773e3ed16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:b3:a4:56:4b:b6:1b:1b:d2:9c:2d:0e:2b:
db:99:dc:37:22:2a:24:c6:fe:93:99:45:a8:dc:df:
94:07:38:5f:6e:f0:c6:4d:02:a7:1d:6f:f3:fa:56:
e7:0d:a5:1f:aa:cf:e3:b4:ee:98:a1:4a:73:b6:4c:
c2:47:a9:60:de:a4:d0:8c:e8:2b:0b:97:af:49:02:
80:15:fc:37:97:69:75:e9:87:6a:43:8d:ca:55:c1:
a3:8a:26:5a:90:78:d5:61:71:3a:49:22:e7:c4:47:
e9:d7:51:3a:87:05:8d:d2:02:ea:75:49:e4:75:32:
0c:53:e8:ed:d4:cf:6b:c1:b6:8e:e7:82:f1:0b:31:
fd:10:11:19:f3:79:20:8e:09:f3:0e:ce:40:f0:3b:
90:0c:2c:c7:e0:93:84:3d:05:e3:24:8f:e7:a2:c1:
d0:da:1a:e3:c5:9c:c9:b7:4e:6e:56:fe:c7:61:b6:
c1:23:ab:b7:20:25:00:62:15:fe:93:a2:61:04:3c:
cc:0c:b3:97:15:a3:d4:a1:b0:95:8f:5a:96:b2:3c:
b0:62:88:84:f7:39:27:8d:29:d2:0d:d0:84:85:fa:
ff:f4:ac:bc:dd:8c:a8:f9:af:55:cd:ef:4a:fd:68:
f0:c7:bc:1b:91:be:43:13:ea:d4:cd:07:8a:67:db:
3d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E7:D7:B3:BC:4C:07:91:C0:CF:FE:3F:15:55:AB:77:3E:3E:D1:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/1b90de-2b76-4d0b-9093-2fc35cd1ac2a/1/COfXs7xMB5HAz_4_FVWrdz4-0W4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.224.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199102
Signature Algorithm: sha256WithRSAEncryption
af:54:3b:73:a3:63:dd:58:41:f9:91:76:53:93:ff:19:a3:af:
6d:d6:ad:9b:92:dd:3d:96:c4:14:af:f0:cb:9d:e5:61:5c:8c:
77:fc:0b:31:de:3d:43:40:40:b1:bc:bb:a1:9b:37:c7:ad:2b:
9a:6b:65:fa:4a:d9:b6:81:d2:9d:95:aa:0d:e2:aa:cf:83:93:
22:69:70:12:a5:ac:69:da:d2:85:ee:a1:85:5c:12:e8:51:78:
9a:50:e0:de:59:1a:5b:7d:e1:be:88:ac:83:af:84:7a:31:ce:
39:04:4a:8e:34:58:99:50:84:05:40:5d:fe:51:7f:b5:b0:b2:
92:30:2d:28:30:95:d5:38:4c:2a:4b:09:25:d1:0d:80:55:db:
61:43:e2:3c:b6:4f:ce:c7:65:ef:df:d1:f1:2b:6c:0d:63:99:
43:86:a1:d9:5f:b7:87:41:90:97:d8:d3:7e:a1:b6:ed:a4:9b:
9c:08:3a:3f:7b:72:9b:27:58:de:ef:46:a9:0c:02:74:06:0c:
c0:bb:f3:3c:e9:70:ca:52:74:1b:ce:81:79:59:9f:d3:bf:e7:
7f:7d:16:42:63:34:4f:20:3f:eb:22:a2:06:4d:38:55:36:e9:
27:3d:77:56:b8:ce:1e:09:5c:0b:91:89:1c:6d:56:24:97:2d:
f8:d3:eb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 23:57:10 2025 by rpki-client