Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer
File: H54l9KiLi7Q8VNWPa051CJ-Qb9I.cer (raw, json)
Hash identifier: wbVhu6+K73cP1x5/zaWUUcTP9rc9kik8a2p/OXPfi9c=
Subject key identifier: 1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B6252E6980A5F222371761CA1641F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209390
IP: 185.108.64.0/22
IP: 2a06:6280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:25:2e:69:80:a5:f2:22:37:17:61:ca:16:41:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1f9e25f4a88b8bb43c54d58f6b4e75089f906fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:08:b7:9b:06:8a:08:ca:50:0c:b2:b3:27:
3c:6f:66:6a:9c:29:cb:a7:46:40:e7:1a:9f:4d:f0:
e7:81:66:92:89:57:b6:c7:5f:9d:43:75:df:28:ee:
73:2f:c7:11:2b:a0:28:cb:9d:56:93:89:cd:8c:b4:
a4:4f:f3:d5:63:4a:45:cb:42:f7:de:46:ec:4d:5d:
38:1a:5a:fb:ae:08:72:a4:6e:5c:24:db:48:46:28:
fc:a6:f5:2d:80:1f:8a:f8:67:38:07:15:43:06:8a:
e3:12:85:e7:ef:de:17:6d:a7:42:fa:a1:a8:e1:fb:
2e:76:10:59:78:4a:0d:bf:a8:8e:d0:6d:19:ca:54:
ad:ea:f6:9c:e6:69:a5:15:65:af:11:76:27:b6:97:
c8:b3:c5:20:6a:4b:20:9e:45:0d:6f:85:a5:01:26:
82:c6:65:3a:56:9d:39:74:e4:a4:03:0a:98:2a:88:
df:a6:4e:d5:59:12:c8:c1:8a:8f:89:94:a5:a3:ed:
60:50:64:95:63:ca:44:bf:b6:55:48:ed:a2:15:18:
7c:c6:64:e2:45:18:40:0c:8e:6f:f5:a5:a2:56:bb:
40:92:88:e3:92:5a:0d:30:38:14:ca:40:3c:9a:e2:
8a:40:11:fb:fc:2a:d4:db:97:79:82:c3:4d:a6:45:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9E:25:F4:A8:8B:8B:B4:3C:54:D5:8F:6B:4E:75:08:9F:90:6F:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b5f20-6ef6-44b9-a691-e554a35e9e77/1/H54l9KiLi7Q8VNWPa051CJ-Qb9I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.64.0/22
IPv6:
2a06:6280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209390
Signature Algorithm: sha256WithRSAEncryption
a3:51:83:08:80:27:95:00:7e:03:00:ec:e0:4e:e7:35:1f:0d:
18:6d:e1:7b:53:f5:39:62:4c:2f:c7:e7:24:f4:cb:16:63:82:
41:42:e6:74:55:e4:dd:7d:61:10:31:57:b1:78:fc:71:b7:6e:
f2:24:e9:89:1a:b9:5a:8d:8d:e9:fa:3e:d1:db:3b:41:d6:47:
2d:80:28:da:99:0a:3c:ac:b2:85:5f:07:76:02:3a:37:7b:9c:
f5:6f:dd:d9:d0:52:99:d4:91:f2:f3:c1:19:ff:ec:96:1f:42:
55:d9:ba:d7:31:e1:d9:f5:10:d9:93:57:37:ea:bb:db:73:79:
1a:52:25:0f:d8:cc:4f:40:cc:f1:f8:59:79:c6:27:ee:c5:a9:
04:a7:b9:2b:83:8a:8b:2c:b3:36:9a:90:ee:17:41:41:e4:63:
a6:a8:4f:86:03:b7:74:55:13:53:a6:5e:f3:75:e2:8a:06:38:
31:07:08:61:d0:06:d0:1d:c4:48:b4:44:77:08:a5:05:4f:40:
47:0d:e4:ff:db:6f:39:2d:a9:38:f5:81:6b:6a:f6:ad:09:a0:
99:a6:b6:63:47:e6:f4:35:33:f0:1a:83:1b:b0:84:b8:c4:8b:
d1:fa:a8:47:73:90:56:ee:06:f9:ba:d9:0a:98:e3:e7:0d:7b:
5d:66:e6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:41 2025 by rpki-client