Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer
File: Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer (raw, json)
Hash identifier: DY7REsrx3XFHmpC0eh338DiGcnJv0xMnShJWvU80P2I=
Subject key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC013F0C2F545FFBB4EB85B587BFA4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202777
AS: 203764
IP: 185.124.148.0/22
IP: 185.235.141.0/24
IP: 2a06:ee80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:01:3f:0c:2f:54:5f:fb:b4:eb:85:b5:87:bf:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:40:9e:73:76:eb:64:85:56:62:51:d0:8d:
ee:56:33:13:98:73:2d:f2:ed:47:4b:73:da:9a:f1:
83:ad:d4:7f:72:7a:7f:60:e6:45:4d:a4:a4:6a:4d:
d6:d3:e2:7c:6a:11:c0:77:1a:f0:90:8e:7d:cb:97:
db:e9:a6:ea:88:4d:2e:d5:29:4d:9d:c1:05:9b:49:
1e:f0:cf:00:5c:df:29:04:c8:77:82:a4:8b:56:a0:
c4:db:47:ba:57:9e:b2:81:01:e7:1f:43:29:64:be:
8d:82:fb:a8:37:a1:a2:4c:4c:a4:c2:83:ce:52:ee:
88:63:26:13:1b:db:28:7f:fa:d1:aa:81:a7:5b:6f:
d3:4b:d5:d7:d9:52:7e:52:a7:67:56:26:5d:57:9f:
7f:fe:fe:00:1b:86:f5:6e:69:8b:b2:84:b1:54:80:
19:c2:6f:61:81:d7:ff:a6:9a:81:a4:a0:24:a0:a9:
1c:93:d9:0f:96:05:77:49:a2:e4:ea:7e:95:3c:91:
ca:04:8c:ea:b2:01:59:47:08:65:27:64:bf:98:31:
8c:e5:8e:ec:9a:00:9b:2e:be:17:f2:24:ce:01:31:
2a:3c:14:1a:8b:37:68:70:47:8c:bc:1c:f9:e5:17:
0e:e7:69:f9:56:d2:17:d9:b3:35:6c:ef:3a:b0:19:
ab:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.148.0/22
185.235.141.0/24
IPv6:
2a06:ee80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202777
203764
Signature Algorithm: sha256WithRSAEncryption
ab:84:80:fa:f8:1f:6f:8c:06:cd:30:4b:87:12:80:5d:0d:8c:
27:f0:3f:12:b8:c0:e4:e9:a3:fd:26:4e:9b:b2:28:f3:d2:25:
cb:55:66:5d:a8:45:9a:d1:2f:de:8f:28:7b:1c:83:8f:a0:d8:
06:ad:e0:34:8c:38:0d:d4:45:8b:62:6d:c5:78:f4:ac:54:76:
96:d8:91:dd:bf:85:30:79:6e:0d:5b:bf:05:82:15:31:c5:cc:
27:c5:6a:dd:df:16:ed:a3:f4:51:f5:9c:11:30:09:47:f5:d7:
c2:04:69:43:25:86:4c:a2:12:99:32:b9:8f:ea:69:5d:17:5a:
89:25:1f:e2:49:01:07:23:f9:c0:66:8c:02:ed:02:6c:26:20:
79:4d:e9:41:fb:1d:8a:6d:07:c1:16:1b:86:8f:f5:dd:7b:ec:
04:2b:3a:b8:5b:19:89:72:e3:99:77:20:5f:2e:32:10:6f:c1:
23:cb:05:b1:22:e9:cf:d7:69:d3:9a:99:eb:4e:1f:98:05:3f:
b5:b5:ab:b5:e3:4c:7c:a3:ee:e4:3e:57:47:ab:61:ff:01:bd:
49:c7:fc:06:98:b4:df:cf:a0:fa:91:18:90:ff:7b:d7:3b:ea:
e7:ca:89:1c:12:89:49:f2:7b:df:93:59:41:cc:f8:83:e2:4b:
53:43:db:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:40:17 2025 by rpki-client