Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer
File: R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer (raw, json)
Hash identifier: 192xkxUIrrJccWdf9ZIavBqUFpeyznkG+3Nk3qptrmM=
Subject key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC001183475CAB3A676A9E1EF6D868
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31438
IP: 83.137.64.0/21
IP: 212.89.192.0/19
IP: 2a0d:5f00::/30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:00:11:83:47:5c:ab:3a:67:6a:9e:1e:f6:d8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:61:8e:c7:52:db:0c:91:15:c0:9b:70:9d:d6:
84:bd:9a:83:db:aa:18:bc:c2:39:20:f7:72:7a:8b:
4c:87:5f:f9:70:e8:c2:a8:c0:7c:e3:3b:ed:c3:20:
cc:0e:5c:ea:e7:06:3b:43:41:b6:95:81:0a:cb:c0:
29:49:60:f7:e6:b8:70:72:4c:20:1c:bf:8d:19:58:
6a:ed:9d:60:21:e7:45:40:30:06:32:36:ca:3a:fd:
90:30:ba:d4:5b:31:fb:a0:3e:60:b0:ad:8e:05:9d:
6b:5f:ba:93:77:5a:b5:cc:53:4c:2f:71:21:8a:c0:
a0:58:e3:b3:9b:bb:c2:c0:1e:7d:48:fd:4b:e9:f3:
65:c4:03:c8:57:46:87:c5:d1:bc:a6:61:23:ce:bc:
cd:54:db:33:8b:1b:4b:29:f2:af:10:76:27:02:16:
ef:2e:14:da:38:d6:6d:60:0b:62:0d:d1:79:7a:7c:
21:81:b4:f6:a6:8d:8c:72:c3:51:9e:17:e2:2c:a6:
bd:31:6c:71:c1:14:04:52:f8:6a:af:c9:db:15:5f:
91:03:6d:aa:52:15:06:c8:2b:6c:34:b9:ce:78:e4:
8b:f0:b5:14:27:46:43:4a:fa:75:a1:53:c7:bc:99:
11:52:dc:09:8e:bb:ed:53:49:18:78:54:2a:0f:47:
10:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.64.0/21
212.89.192.0/19
IPv6:
2a0d:5f00::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31438
Signature Algorithm: sha256WithRSAEncryption
a1:01:49:01:e5:04:ef:db:65:e0:b9:18:c6:8d:2b:bd:fe:c8:
de:a9:f0:f3:5c:4f:d6:7b:04:8d:f7:70:e4:3f:10:ee:53:a0:
8f:63:d6:5a:c3:12:79:bb:dc:4c:2c:c6:30:d7:62:b6:e0:78:
a2:c3:80:78:74:20:c2:f1:0d:ce:a8:8d:b3:f9:20:93:7a:ef:
08:ef:00:01:8a:76:4a:b7:97:e7:04:37:86:79:b5:d8:bb:cd:
ed:9e:64:32:ed:f0:82:1c:85:56:02:78:55:c7:96:24:79:bb:
c0:cb:90:97:34:16:cb:de:a9:76:ab:64:f2:03:2d:28:d2:35:
da:ae:a3:8a:2c:f9:33:d6:76:8d:9b:1e:cc:c4:68:7f:82:56:
66:c4:c5:f3:a0:f9:8c:45:e2:55:32:3b:e5:b1:3f:93:ac:66:
bb:0e:c9:7c:a5:47:15:80:d7:c3:1e:a5:a7:3f:90:47:40:11:
21:09:3e:5f:0b:0a:e6:02:8e:9a:8c:1a:1d:95:1b:ff:d0:e8:
b4:2d:e3:07:60:01:a3:a1:a6:cd:10:e5:92:fd:2f:44:97:03:
41:50:5c:dd:e8:52:37:33:36:22:0d:4e:84:ab:d4:86:4b:96:
c5:1b:86:ad:cf:02:ea:13:1a:fb:06:b1:12:6e:07:14:3a:4d:
1f:ac:ce:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:58 2025 by rpki-client