Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
File: GpnHX-V3fhNlc-HlHvumeB86WxY.cer (raw, json)
Hash identifier: Exaa2yxt3NaRPjdlc/ObZPJeYauW5dJti2iaoyQ9+DM=
Subject key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5FA1C1DB65BD616CFC36DDDFD251F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42306
AS: 203450
IP: 37.44.208.0/22
IP: 46.253.96.0/20
IP: 77.236.192.0/19
IP: 185.134.160.0/22
IP: 2a03:f280::/29
IP: 2a06:ed40::/29
IP: 2a0e:5340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fa:1c:1d:b6:5b:d6:16:cf:c3:6d:dd:fd:25:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:17:c9:da:af:f8:f3:35:8d:bb:d9:b4:57:a4:
ce:6b:ed:e8:37:95:57:40:40:fb:36:e3:8a:78:1b:
19:11:11:11:1a:da:9d:54:ed:14:90:07:5c:3c:f7:
aa:cd:02:5e:10:b7:e7:44:7e:db:6c:78:ff:ff:ad:
8f:3d:05:14:fb:8d:d2:16:92:25:61:9f:a7:1c:79:
c0:09:82:7c:ce:d5:c8:ab:5c:7f:66:51:a3:cb:57:
71:45:91:17:7d:23:95:7f:bd:c4:eb:63:13:d7:22:
6f:67:c3:03:b3:63:70:c0:d0:f7:b2:d8:20:7f:8f:
71:aa:67:a0:fb:d4:67:4a:c3:7e:36:6c:ee:1b:b4:
4b:be:5c:82:f4:29:9a:21:b2:2f:59:ef:58:99:b0:
56:89:a0:22:30:2e:24:64:0e:d9:f2:2a:09:50:91:
25:a7:75:6c:3b:e6:51:96:c2:b2:8f:23:da:bb:c4:
16:a0:29:17:8e:be:35:94:1b:b8:f7:40:b5:6a:d2:
9a:19:94:ba:26:1a:b5:d3:e7:53:ca:bf:42:b4:49:
43:69:ed:1c:f0:94:39:80:f1:c1:ed:5e:c6:57:e4:
17:ff:ae:3e:5f:71:5f:ee:b9:c5:ec:72:58:30:b3:
16:34:25:d5:d0:85:23:ba:0b:52:30:cc:99:bb:5b:
13:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.208.0/22
46.253.96.0/20
77.236.192.0/19
185.134.160.0/22
IPv6:
2a03:f280::/29
2a06:ed40::/29
2a0e:5340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42306
203450
Signature Algorithm: sha256WithRSAEncryption
60:0a:51:17:4b:c2:bf:99:bf:a9:74:31:76:13:1b:ca:72:2a:
7d:4e:55:9a:28:56:79:05:7e:40:24:a4:04:55:e1:4f:e7:b7:
04:15:b0:7d:6d:ce:0d:aa:a3:0a:55:bf:bf:57:f3:e3:38:da:
80:7b:7c:60:c9:2d:68:e7:86:2a:c3:66:88:36:01:89:a9:b2:
74:10:45:09:ef:ce:f8:65:a4:4b:0f:c6:92:f3:e1:2a:c2:7f:
8f:4d:b5:1f:1c:53:da:a8:be:fe:9b:19:cf:47:85:c8:0c:7a:
d9:20:77:29:be:91:e2:c9:e3:a0:e8:83:51:cb:33:70:a5:19:
b1:cf:87:20:cb:0d:fe:b4:cc:03:eb:08:58:f1:ed:e8:f7:13:
02:c7:2a:e1:50:da:da:4e:fb:02:cb:10:24:c1:23:68:dc:fe:
8b:eb:54:49:3d:a2:1c:5a:2f:be:79:f8:ce:7a:ce:6b:29:a6:
95:0c:02:6d:67:ed:e6:40:47:0b:bf:03:69:6a:f7:07:2a:4a:
56:f8:d6:ed:03:ab:6a:4b:30:58:f9:17:e3:8e:4c:23:03:6e:
8a:7a:1d:eb:ad:67:2f:35:70:22:69:2f:b6:8d:5c:78:de:08:
2a:1a:c9:2b:92:27:f3:d0:6f:f3:9d:55:95:6c:f1:61:18:4b:
bc:bd:cd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:25:14 2025 by rpki-client