Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
File: TDfyfrSZezvvnygmajlpQFD-dPk.cer (raw, json)
Hash identifier: VyEI92bDv2Ru+wtrooLvdrENsmbwHeZhb0sgdf0ce30=
Subject key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC56ED6602CFB5ECC5B7A10E4292E37B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 14:30:24 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 12975
AS: 31408
IP: 1.178.112.0 -- 1.178.143.255
IP: 1.178.208.0/20
IP: 1.179.40.0/21
IP: 1.179.72.0/21
IP: 1.179.88.0/21
IP: 5.11.40.0/21
IP: 24.42.64.0/18
IP: 37.75.208.0/21
IP: 43.230.140.0/22
IP: 43.241.156.0/22
IP: 43.243.24.0/22
IP: 43.243.32.0/22
IP: 43.243.92.0/22
IP: 43.245.156.0/22
IP: 43.245.208.0/22
IP: 43.255.108.0/22
IP: 45.113.108.0/22
IP: 45.116.248.0/22
IP: 45.117.4.0/22
IP: 45.117.40.0/22
IP: 45.121.104.0/22
IP: 45.127.176.0/22
IP: 45.134.202.0/23
IP: 46.60.64.0/18
IP: 59.152.88.0/21
IP: 66.9.0.0/19
IP: 77.91.128.0/18
IP: 82.213.0.0/18
IP: 83.244.0.0/17
IP: 85.184.240.0/22
IP: 86.104.188.0/22
IP: 95.215.104.0/22
IP: 103.27.144.0/22
IP: 103.37.84.0/22
IP: 103.47.68.0/22
IP: 103.49.208.0/22
IP: 103.53.4.0/22
IP: 103.57.108.0/22
IP: 103.102.252.0/22
IP: 103.193.132.0/22
IP: 103.196.120.0/22
IP: 103.199.176.0/22
IP: 103.206.36.0/22
IP: 103.206.108.0/22
IP: 103.209.204.0/22
IP: 103.215.4.0/22
IP: 103.216.184.0/22
IP: 103.231.104.0/22
IP: 103.239.96.0/22
IP: 103.242.60.0/22
IP: 103.248.36.0/22
IP: 103.248.244.0/22
IP: 113.212.64.0/22
IP: 115.166.128.0/22
IP: 118.107.180.0/22
IP: 139.190.128.0/18
IP: 144.48.236.0/22
IP: 150.253.32.0/19
IP: 158.140.16.0/20
IP: 158.140.64.0/18
IP: 162.212.180.0/22
IP: 176.65.0.0 -- 176.65.11.255
IP: 182.161.60.0/22
IP: 185.19.220.0/22
IP: 188.0.96.0/19
IP: 188.161.0.0/16
IP: 193.223.252.0/23
IP: 193.227.236.0/23
IP: 194.169.188.0/23
IP: 194.176.98.0/23
IP: 195.123.112.0/21
IP: 195.123.160.0/21
IP: 203.28.19.0/24
IP: 203.30.104.0/22
IP: 203.89.108.0/22
IP: 203.189.236.0/22
IP: 212.14.224.0/19
IP: 213.6.0.0/16
IP: 213.244.64.0/18
IP: 2a00:4a60::/29
IP: 2a00:d2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d6:60:2c:fb:5e:cc:5b:7a:10:e4:29:2e:37:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 14:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:22:31:6c:ff:d8:77:f0:94:b5:92:89:77:
93:b5:a2:9c:c9:ea:c7:5f:61:f6:09:9d:f9:30:44:
3a:ad:0b:93:4c:1f:d1:9b:51:ab:10:3d:95:94:dc:
4a:c9:7e:59:50:e9:4c:f0:a1:5f:d6:8c:4e:c0:6a:
a7:2d:cd:ee:1d:37:21:84:6e:c9:31:19:ad:ca:b3:
6f:1c:76:40:be:b2:45:22:ad:af:76:13:2d:17:31:
3b:64:b6:97:f7:08:2e:a1:03:fb:f3:99:8f:42:8d:
c0:7d:f6:db:e8:0b:2f:8f:8d:53:67:32:09:61:19:
13:f0:b0:1a:6b:f2:6f:d9:2f:7f:56:00:9d:ef:0e:
e3:1a:83:8b:93:ba:8a:15:e6:78:94:f2:bf:35:a7:
6e:5a:85:82:10:b0:c2:1c:03:49:cd:ee:ef:ac:16:
af:d4:54:8d:01:f3:87:92:23:dd:c9:8f:8c:d5:b3:
9a:68:ab:d3:9a:d4:82:ac:b1:6b:82:14:a8:23:4b:
c2:c3:91:99:51:ce:31:31:0c:e2:17:1d:c0:67:b6:
a5:16:ea:25:30:8d:aa:41:ee:92:cf:92:16:dc:14:
44:a5:a0:b2:f8:0c:9b:00:cd:b7:e5:80:15:6a:33:
da:3d:c8:22:ba:ca:3a:85:ae:b3:8f:cf:23:23:96:
97:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.112.0-1.178.143.255
1.178.208.0/20
1.179.40.0/21
1.179.72.0/21
1.179.88.0/21
5.11.40.0/21
24.42.64.0/18
37.75.208.0/21
43.230.140.0/22
43.241.156.0/22
43.243.24.0/22
43.243.32.0/22
43.243.92.0/22
43.245.156.0/22
43.245.208.0/22
43.255.108.0/22
45.113.108.0/22
45.116.248.0/22
45.117.4.0/22
45.117.40.0/22
45.121.104.0/22
45.127.176.0/22
45.134.202.0/23
46.60.64.0/18
59.152.88.0/21
66.9.0.0/19
77.91.128.0/18
82.213.0.0/18
83.244.0.0/17
85.184.240.0/22
86.104.188.0/22
95.215.104.0/22
103.27.144.0/22
103.37.84.0/22
103.47.68.0/22
103.49.208.0/22
103.53.4.0/22
103.57.108.0/22
103.102.252.0/22
103.193.132.0/22
103.196.120.0/22
103.199.176.0/22
103.206.36.0/22
103.206.108.0/22
103.209.204.0/22
103.215.4.0/22
103.216.184.0/22
103.231.104.0/22
103.239.96.0/22
103.242.60.0/22
103.248.36.0/22
103.248.244.0/22
113.212.64.0/22
115.166.128.0/22
118.107.180.0/22
139.190.128.0/18
144.48.236.0/22
150.253.32.0/19
158.140.16.0/20
158.140.64.0/18
162.212.180.0/22
176.65.0.0-176.65.11.255
182.161.60.0/22
185.19.220.0/22
188.0.96.0/19
188.161.0.0/16
193.223.252.0/23
193.227.236.0/23
194.169.188.0/23
194.176.98.0/23
195.123.112.0/21
195.123.160.0/21
203.28.19.0/24
203.30.104.0/22
203.89.108.0/22
203.189.236.0/22
212.14.224.0/19
213.6.0.0/16
213.244.64.0/18
IPv6:
2a00:4a60::/29
2a00:d2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12975
31408
Signature Algorithm: sha256WithRSAEncryption
21:c1:8f:3f:f2:4b:40:d2:5a:6c:82:11:f8:ee:8c:3c:26:08:
70:dc:6f:ac:18:e2:a6:ff:0f:6d:c8:d8:31:d2:30:c5:bf:c2:
18:10:b8:d1:6b:e5:c4:d6:a3:b5:f9:72:be:d6:84:f7:44:38:
be:a0:4d:6a:36:db:68:e0:4f:75:cc:ba:63:73:08:52:81:66:
87:31:58:50:1c:97:fc:91:83:d7:df:9e:d6:9b:55:21:87:d4:
f1:f2:5c:47:2f:af:fd:23:29:0b:4e:df:c1:b2:75:fe:c4:c1:
9e:42:14:c8:09:70:0d:3a:90:f8:d3:d3:10:3c:31:ba:a5:f8:
88:ae:5b:10:5f:89:09:e6:da:4e:27:ff:12:84:25:f5:d9:a0:
25:ac:53:9a:c6:0c:5e:e8:b0:8d:e8:83:15:9b:a1:69:b7:b3:
39:c1:47:73:17:8b:1f:91:57:05:30:47:fe:86:57:93:ac:3e:
95:ae:ec:1c:78:dc:48:0e:ea:06:fd:2d:ff:8e:3b:dc:40:82:
30:db:c4:35:f5:b9:14:98:4d:da:24:ee:3c:96:4a:1d:45:68:
04:14:e7:3f:8f:8a:6f:e1:bd:99:6e:a3:0f:7a:ab:4d:2d:b1:
1a:b9:d9:e9:3c:ed:6b:de:f3:6a:a7:cb:65:53:92:04:30:c3:
4b:2c:bf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:45:54 2024 by rpki-client on console-ams.rpki-client.org