Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer (raw, json)
Hash identifier: hgUU2bZvk38zfKc6+zORN0dMKFgALKFsikIs2HCfm18=
Subject key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDD3759BA4C5BBBADEBEB866A750DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216200
IP: 46.255.27.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:d3:75:9b:a4:c5:bb:ba:de:be:b8:66:a7:50:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0d:14:e3:aa:6d:8d:7f:7c:92:a5:5d:8a:63:
70:3f:25:32:fb:8d:66:7a:0d:bc:65:a2:a5:66:88:
b0:bf:03:5a:37:3f:ea:5e:f5:1d:87:22:63:5d:ed:
7d:27:76:39:cf:5b:fa:c0:65:cd:14:3d:de:eb:ff:
2c:75:b3:07:5e:fc:8c:66:77:cc:ca:5a:a3:68:26:
bc:fb:cc:c6:0d:0c:e6:c8:46:af:af:ca:8f:fd:a9:
63:27:16:5e:29:00:22:8c:e6:dd:fd:80:d0:4a:b5:
ee:4c:92:b6:40:95:d5:5b:0b:ab:7c:4b:90:9a:4f:
5c:e0:aa:18:91:61:e8:9d:80:97:47:04:fd:15:81:
88:85:29:63:5f:ae:9b:28:6d:b9:93:1e:49:f5:4c:
24:ab:f4:4b:3b:37:e3:1c:81:d0:71:ed:9a:90:f2:
1c:70:26:49:e5:3e:9d:00:23:77:7f:c0:9c:2c:9e:
31:99:99:da:94:56:bd:b6:b4:13:a4:8f:ae:18:99:
61:fe:02:4f:2b:1e:f3:ac:65:d3:dc:07:6c:53:a7:
ed:4b:d1:79:e7:4c:53:3e:b4:43:29:e1:be:88:5d:
90:9b:7a:a0:de:52:af:d9:36:48:56:14:a1:3c:b9:
63:17:21:12:5f:23:67:14:4c:77:c8:50:46:64:f8:
9f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.255.27.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216200
Signature Algorithm: sha256WithRSAEncryption
6a:47:f1:b7:f0:27:32:0d:b9:bc:24:50:cd:b0:ff:99:80:a5:
e2:44:ae:a3:81:ec:83:af:1f:23:3a:f0:f2:b6:92:33:ca:de:
0b:89:8b:e4:4c:45:65:bb:69:71:4e:26:cc:8f:f1:3c:05:f1:
f6:68:2c:2b:b6:d8:70:16:e2:e7:e1:22:86:22:5e:ec:94:69:
33:39:54:16:50:ae:ee:c2:ab:d8:05:90:99:d4:dc:ad:9c:ce:
8f:3d:30:7b:ef:3e:3f:3d:ec:a4:90:b7:9b:af:66:3a:4d:a2:
fb:0a:8c:cb:f4:93:fe:5a:35:a4:40:5e:b5:d5:21:9b:6c:ca:
f2:17:a5:b6:d5:78:52:2c:a9:ec:d8:f6:2f:84:11:af:2d:98:
b9:ae:72:79:2b:05:9e:41:04:50:ee:80:01:8e:1e:02:1f:06:
0b:ba:4d:56:35:36:42:4c:81:8b:12:0b:9b:00:c8:d0:0b:59:
7c:1e:95:19:a1:25:c1:02:9d:4b:4e:68:e4:71:d0:0a:47:e1:
dd:a5:71:1e:68:d8:bf:ae:e7:11:f7:9c:9a:a0:bf:33:6d:ce:
97:cf:55:75:26:0b:5e:65:ad:d6:7f:1b:d1:d0:7e:f4:15:7e:
7b:33:4b:4a:01:8e:ff:30:07:dc:34:2c:a6:32:d7:cd:93:77:
55:ac:cf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:21:05 2025 by rpki-client