Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Phq1-Isc13KPF3zIbjO8654iFLI.cer
File: Phq1-Isc13KPF3zIbjO8654iFLI.cer (raw, json)
Hash identifier: k9qquTP+YikCt2bOetMkL1DUp2X1+XHvQWOMGO+31LU=
Subject key identifier: 3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427486AFF7A5B61C8A0077A2D0F6493F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39172
IP: 185.53.60.0/22
IP: 2a04:ca40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 14:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6a:ff:7a:5b:61:c8:a0:07:7a:2d:0f:64:93:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e1ab5f88b1cd7728f177cc86e33bceb9e2214b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:87:88:d7:67:71:40:25:99:21:fc:55:b7:
7b:88:81:eb:5b:d6:7e:54:06:cf:aa:b8:c7:48:46:
f3:dc:0b:3d:65:55:58:9b:fd:db:2d:79:a9:97:6c:
06:b2:50:00:a1:1c:e8:c2:37:25:e2:ea:35:e0:25:
4e:b8:36:cb:9a:0f:c7:00:92:ab:67:86:6a:cd:b1:
94:f3:99:c9:2e:42:49:8c:85:52:15:d5:f7:8f:08:
86:49:83:92:fb:d5:87:9a:54:25:5d:fc:53:f9:75:
08:22:1b:7e:a1:ca:08:5c:c7:4e:90:50:5d:ac:10:
a9:fe:21:85:95:0d:a4:56:73:8a:24:06:ff:d4:b8:
e6:7e:8e:c4:87:f2:1e:16:1a:8b:90:56:f6:e8:03:
31:7d:6f:00:54:97:b1:b6:57:dd:7d:28:ef:db:40:
d3:a2:da:f8:16:62:e1:d6:c9:16:08:95:52:e2:15:
8f:52:92:6a:2e:bf:25:d0:08:06:8d:e0:24:59:dd:
ab:9a:40:fb:0b:99:b1:d7:db:3e:a5:e7:90:4f:a8:
07:ba:a4:89:8d:0d:dd:c2:1c:df:e6:12:d5:a3:72:
1c:6d:5a:16:a9:80:d5:19:2c:65:2d:71:9b:8f:a1:
b2:2c:51:73:2d:22:4d:c4:24:6e:0f:25:ff:de:9f:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1A:B5:F8:8B:1C:D7:72:8F:17:7C:C8:6E:33:BC:EB:9E:22:14:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8b2aaf-345b-40bb-a31b-fd98fd70f34f/1/Phq1-Isc13KPF3zIbjO8654iFLI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.53.60.0/22
IPv6:
2a04:ca40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39172
Signature Algorithm: sha256WithRSAEncryption
78:5d:f5:8e:f4:42:50:e2:35:92:a1:ef:57:a7:6e:ae:16:06:
58:49:c6:df:3b:7b:30:50:a3:40:1c:21:c2:31:9b:21:fe:cf:
5a:f3:92:c4:4a:78:9e:64:62:11:24:22:84:90:46:d6:b2:07:
9f:2f:78:fb:81:c1:2f:3a:be:07:2b:18:b9:33:bb:1c:01:17:
db:8f:c2:fe:2e:b2:71:f1:7f:54:84:19:65:69:38:e4:0f:a9:
50:8a:c0:fb:e5:28:cf:bc:90:39:4e:e1:74:7e:b6:b4:2d:29:
b6:03:95:17:af:da:50:42:ed:a6:99:a2:94:f9:ea:3f:86:1d:
5b:bf:b9:4f:b1:43:c6:07:01:d1:c2:e3:7b:00:9c:d1:77:6e:
36:98:64:fc:32:b2:21:cc:ff:57:14:27:f3:cb:93:eb:bf:8f:
ad:e4:e6:15:3c:99:79:89:72:0e:f8:2e:9e:af:18:b2:e4:c7:
36:db:1a:cf:f6:a0:79:79:f5:f3:20:f4:cd:4a:98:06:66:0e:
93:b9:a2:18:1a:a3:ae:6b:8c:a8:47:6f:50:7d:10:38:11:9b:
0f:20:75:9d:a9:87:64:19:00:0a:9e:ad:7e:e0:96:04:18:6a:
2c:47:dd:92:38:0f:06:e2:00:13:41:66:6e:d2:aa:5e:7b:ed:
1c:d9:fa:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:30:24 2025 by rpki-client