Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SOmaP-7GTWutCY0bLfC1NqA4jqM.cer
File: SOmaP-7GTWutCY0bLfC1NqA4jqM.cer (raw, json)
Hash identifier: fS8IsegfJO9zjyQsdoNj9DYqBHtVeUao80C7CTCGRmw=
Subject key identifier: 48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424457BD9D34A97CCE3A317E727E43B4D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44943
IP: 178.22.48.0/21
IP: 185.34.240.0/22
IP: 2a00:b880::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7b:d9:d3:4a:97:cc:e3:a3:17:e7:27:e4:3b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48e99a3feec64d6bad098d1b2df0b536a0388ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:3e:d9:2c:22:a7:ba:e1:ed:1a:5b:49:73:
ef:56:60:c5:46:fc:2b:13:d8:2a:1e:64:28:01:da:
9b:a1:68:63:e6:cd:c5:e4:a4:8d:21:1c:f3:fc:3d:
43:83:5a:3b:49:57:38:02:98:c6:d8:e2:fa:84:8d:
29:de:8a:ba:52:53:f1:e2:c4:d6:70:19:1c:9c:01:
82:85:09:57:ec:76:9d:08:33:ed:23:c4:36:98:55:
af:94:12:fd:14:8f:f4:e5:7b:0f:a1:00:5e:5b:c7:
cb:f7:fc:76:e1:ad:7c:63:09:72:dc:66:76:d4:0c:
01:8d:bf:1f:00:cc:10:69:7d:d7:b7:5d:2a:54:61:
ee:5b:ba:83:d3:58:ae:5c:ec:27:00:dd:74:77:64:
99:d6:7d:25:09:33:3b:ca:3b:b3:0a:3e:dd:ba:ce:
69:d7:f9:0c:b5:c2:70:88:72:4f:fb:99:c1:06:cf:
a2:01:91:5e:9c:76:76:71:36:5a:11:6d:98:65:90:
fe:bd:9e:5a:9c:f0:43:c9:12:53:b5:2a:1b:3d:4d:
fb:69:cc:13:73:ac:fd:21:7a:ee:4b:cf:8d:e8:aa:
a0:e5:5b:c8:4a:f9:56:30:59:fe:66:a7:98:7d:98:
8a:37:bd:05:0f:ca:5d:06:61:5d:5d:43:97:01:bc:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:E9:9A:3F:EE:C6:4D:6B:AD:09:8D:1B:2D:F0:B5:36:A0:38:8E:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/24a817-24a6-4ac0-9336-7d7814c7a5f7/1/SOmaP-7GTWutCY0bLfC1NqA4jqM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.48.0/21
185.34.240.0/22
IPv6:
2a00:b880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44943
Signature Algorithm: sha256WithRSAEncryption
24:ae:87:87:1d:61:35:82:a1:47:33:ed:f0:87:da:cd:26:bc:
e6:e0:6d:77:39:4d:30:39:61:42:f9:b5:dd:77:c7:a9:78:0b:
82:c3:35:07:50:a2:ed:ed:17:ee:ed:7c:23:79:1a:4f:27:55:
9e:68:c0:a8:93:bc:15:a9:27:f6:f4:38:5d:3b:f8:24:9a:63:
0e:b2:73:91:bd:d4:64:71:2b:2d:3f:31:ad:4d:7f:2a:d8:04:
cb:fb:a8:85:b7:d4:d8:ef:3b:a5:a8:f3:9d:da:7c:33:69:02:
66:c1:90:57:98:88:cc:ae:7d:3a:8d:e4:b5:37:d9:59:d0:1f:
01:4f:e5:01:6c:0f:e7:77:30:bf:0c:e2:51:f0:02:62:d2:48:
98:6d:9b:09:be:8f:0e:00:67:f4:7f:b6:c4:b7:fc:29:b1:48:
4b:a8:14:d8:9e:0f:85:d9:24:77:4e:bb:1d:7c:6f:43:cc:4d:
f3:5f:de:70:72:91:d9:42:85:58:f6:31:e0:83:11:4d:3b:e9:
42:3e:54:80:f8:c6:e9:88:14:cb:b4:65:2f:62:0d:aa:c2:01:
87:d3:2b:08:b6:3f:8b:81:7e:11:67:c2:9a:b0:78:1c:27:58:
41:7c:cc:f8:44:5c:85:49:4a:ca:e6:a6:72:57:13:c7:74:9c:
36:4d:98:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:18:14 2025 by rpki-client