Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T-uUV-xRnoI3hncQvMgvow6uZ8A.cer
File: T-uUV-xRnoI3hncQvMgvow6uZ8A.cer (raw, json)
Hash identifier: DRTAulmMvq8Ced8DlX8D+rAAwyiFulpNUVaD8e5aXFk=
Subject key identifier: 4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428261473BE6651F105B3046686BE32BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:52:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49188
IP: 185.163.244.0/22
IP: 2a10:9d00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:14:73:be:66:51:f1:05:b3:04:66:86:be:32:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:52:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4feb9457ec519e8237867710bcc82fa30eae67c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7c:a2:2c:1a:66:b1:49:b9:73:ed:75:fd:e5:
83:95:86:64:50:3a:84:4d:eb:b7:21:6e:b5:97:e6:
3c:6c:d3:6d:1d:51:1d:f9:e6:31:97:03:66:b9:0c:
d9:26:af:5f:35:e6:a7:15:d0:63:61:46:0f:13:ce:
66:5e:be:e8:17:23:98:f7:4e:8f:a9:74:7f:eb:e8:
d1:10:d7:93:a9:69:91:4b:84:ad:23:94:73:6c:61:
bb:98:18:75:36:79:f4:d1:88:aa:5f:2e:81:c4:4b:
6d:77:9c:07:4f:73:33:ea:c2:1b:d9:f8:17:8d:1e:
ae:bb:a2:e1:4e:83:4a:a0:49:63:de:fc:b5:f3:60:
f8:63:c3:de:69:c3:20:94:f9:86:db:fc:78:c1:4e:
3c:52:01:5a:9c:9b:c7:fd:13:bd:9a:e4:ea:e9:d1:
26:dd:93:76:af:0e:b2:3b:90:d8:6d:83:09:a0:71:
ae:52:d2:ed:00:78:8f:1c:a6:4e:eb:41:33:98:a2:
61:6a:2f:aa:c4:fb:00:f3:68:59:f3:15:28:27:a4:
cb:df:08:af:59:2d:9d:cb:16:f2:f2:41:fd:ac:df:
1e:eb:2c:68:c9:8f:af:84:94:9f:70:c9:05:e8:31:
af:1d:6a:69:d2:23:eb:91:d3:5c:54:3f:4b:f5:77:
13:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EB:94:57:EC:51:9E:82:37:86:77:10:BC:C8:2F:A3:0E:AE:67:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/b8f50e-475f-4b47-85c0-5f123555cfb1/1/T-uUV-xRnoI3hncQvMgvow6uZ8A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.244.0/22
IPv6:
2a10:9d00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49188
Signature Algorithm: sha256WithRSAEncryption
59:24:9f:49:78:03:ba:d0:0e:85:42:11:ba:57:a9:bf:b8:bb:
89:f9:8e:bc:6c:bf:d9:c3:cf:9b:c4:45:20:ff:c1:3c:94:b8:
72:7d:71:25:29:c7:4e:4b:f3:bb:5b:c4:4f:0b:dc:db:fc:4a:
47:69:e5:88:e6:39:6a:1b:db:03:f1:eb:f9:0a:36:c5:5d:4b:
cf:56:10:3c:1c:05:96:b4:7f:ea:2f:30:b3:ad:f9:41:4f:84:
7a:85:d4:8c:21:79:1d:a0:d3:f2:14:fc:c9:b8:77:77:97:38:
62:b6:87:04:7b:f6:3e:1e:05:f1:cd:33:89:97:6a:98:a6:08:
c8:1a:be:50:f1:e5:ea:c4:d3:20:c3:96:63:0f:3e:c7:80:7e:
e8:cc:02:62:b3:20:03:4a:95:0e:c3:5a:66:bb:b3:d2:2e:b7:
38:a5:6e:0a:92:5b:ab:07:3a:d2:81:5c:0a:d0:c6:71:bd:db:
0a:0e:62:db:4d:0a:83:ee:f9:45:db:21:4e:b9:8a:76:c9:db:
cf:42:d4:56:5c:70:9b:ae:08:5f:59:d6:94:b0:68:6a:c6:d8:
f7:f5:52:39:e2:b0:8c:4b:14:f9:91:1d:7e:f9:d0:9b:b8:5d:
c6:a0:d0:33:b9:50:e0:d0:7b:20:15:e2:0e:62:ca:91:a5:75:
87:2b:ba:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:30:27 2025 by rpki-client