Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U8jE-VEgbxq9hqc9HLuzmQfobh8.cer
File: U8jE-VEgbxq9hqc9HLuzmQfobh8.cer (raw, json)
Hash identifier: s60RBpSGeMy0JAbGKWDh1Gzs+ugHTxi91HrHN8qaju8=
Subject key identifier: 53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B166E2C2167BDB3D1BE1BC89B075AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:47:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 16375
IP: 2001:67c:2568::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:66:e2:c2:16:7b:db:3d:1b:e1:bc:89:b0:75:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53c8c4f951206f1abd86a73d1cbbb39907e86e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:2d:3d:65:77:2f:6c:74:8f:fa:87:00:26:
c0:03:2a:2f:15:40:9c:77:e5:a6:a9:23:c0:82:bf:
f1:68:f8:bb:90:de:ca:e6:89:50:29:fe:2f:d7:9d:
8c:44:28:3b:ad:b8:16:8a:51:54:9f:f6:7e:89:99:
35:93:48:eb:3c:aa:7a:4c:4c:0c:7a:14:78:22:35:
8e:39:7f:78:44:b8:93:70:6c:f7:87:ba:d4:6f:3a:
10:38:04:23:9e:c2:f7:81:b2:97:c5:e1:29:3d:b3:
e8:06:64:fc:1b:aa:19:26:b9:11:e7:2c:a9:22:b6:
6f:32:0a:ec:12:a9:c2:15:47:59:a7:68:be:e1:32:
80:3a:9e:6e:53:42:df:fa:d4:93:d5:5e:fa:46:1d:
aa:41:ec:5d:0f:13:07:34:3e:07:60:e5:e1:81:e9:
f2:7f:f5:ff:ea:03:d2:f9:85:69:54:b4:66:7c:d1:
6b:35:8b:1c:cc:3e:9a:e8:a3:a8:50:28:62:fc:b7:
ec:f2:2b:9e:fa:17:f5:13:06:0d:4e:b5:c9:8f:80:
96:ea:1e:d3:bf:16:1c:24:51:5a:67:a6:9d:13:49:
ad:0d:2c:42:c7:49:49:65:e5:8f:a3:19:f8:90:3c:
2c:a9:43:63:3c:ca:f5:28:e9:12:61:df:02:d8:39:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:C8:C4:F9:51:20:6F:1A:BD:86:A7:3D:1C:BB:B3:99:07:E8:6E:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/793283-e304-4270-b300-1b15b25879f2/1/U8jE-VEgbxq9hqc9HLuzmQfobh8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2568::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16375
Signature Algorithm: sha256WithRSAEncryption
af:a9:20:e1:f1:23:37:44:41:12:8c:20:84:1e:82:5a:dc:6e:
47:39:9f:ef:23:a6:34:3b:0b:3a:ba:88:e1:1d:27:8c:85:98:
ba:08:5a:cd:30:49:f2:a5:0b:56:bb:43:f5:86:db:94:e9:93:
d1:5d:4d:25:dd:88:15:d4:6e:97:25:a9:c5:4a:49:7e:45:29:
a0:52:bd:ea:7d:24:7c:d1:dc:a0:de:fb:7d:04:b9:f2:63:a6:
ec:77:de:19:de:d4:66:f1:57:f4:21:a6:09:25:c6:f7:ed:6d:
a3:92:71:fd:0b:92:c8:cf:9a:10:39:f1:c6:8e:74:23:90:53:
13:ed:bd:c9:d7:9b:a8:3b:e2:9c:2e:d5:fa:dc:c7:5a:ba:f9:
63:d0:35:19:fb:6d:3e:e3:ec:60:59:6c:1a:69:2b:6b:7a:c4:
98:87:b0:fa:ef:4d:f4:52:b6:b2:7b:bb:fa:d2:e4:98:72:37:
1c:24:16:da:f0:ba:21:b9:91:1e:2e:69:a4:38:54:9f:2e:cb:
46:06:aa:96:b7:9b:21:5a:92:9e:f6:8e:5a:8f:d3:b2:99:31:
ff:13:73:cd:ca:26:9a:54:16:b7:ef:f8:53:2e:fa:3d:bf:06:
79:b6:8c:f5:c5:a7:e0:db:ce:cc:60:41:4b:ef:40:ba:eb:86:
7e:3c:8e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:02 2025 by rpki-client