
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UPiOBciYeWyC_wFHVogW6TNCDhg.cer
File: UPiOBciYeWyC_wFHVogW6TNCDhg.cer (raw, json)
Hash identifier: TgCI1zO8twwzvvdI6mXzEz+OXq2a8PEjzBNNkzILNVw=
Subject key identifier: 50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428272FC11F3B7DD6829194C953E6DFF5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:54:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44316
IP: 178.18.16.0/20
IP: 185.211.152.0/22
IP: 194.60.71.0/24
IP: 194.110.214.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:2f:c1:1f:3b:7d:d6:82:91:94:c9:53:e6:df:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:54:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50f88e05c898796c82ff0147568816e933420e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a7:d0:02:32:43:cd:c9:f9:6d:0a:8e:0c:6e:
87:0e:ba:02:ee:25:d1:b9:94:6e:4c:de:ce:0e:c4:
2a:88:ed:d8:4a:0b:cb:c6:16:24:43:fb:28:c0:62:
33:15:e8:36:61:97:c1:5b:87:12:5b:a3:18:25:56:
d3:05:c5:f8:8f:e1:82:9e:64:7c:ca:e1:64:73:2d:
5b:86:b7:71:1e:ae:df:4d:40:b9:3c:c2:da:a8:9a:
4c:87:4a:f1:fa:4f:a3:25:41:b7:9b:58:69:35:92:
b7:c8:96:33:81:60:65:be:ea:04:b6:e2:2a:d7:c0:
ad:62:8c:0a:31:a9:39:84:83:a3:ba:64:cc:b9:b1:
80:5d:07:8d:cd:fa:cc:a7:94:1e:49:d0:d2:e8:12:
c2:1e:37:cd:ce:24:83:c8:ea:64:a3:04:5a:13:4f:
96:ed:db:67:90:8e:0d:d1:d2:15:0b:b5:b5:cc:06:
e7:7a:47:17:7b:dd:d7:ca:00:88:76:d8:0b:85:c8:
8b:78:23:37:63:93:79:88:83:e4:72:c7:2a:d9:64:
f4:b3:27:65:62:d1:ae:ff:24:9a:cc:93:b0:20:cc:
60:de:95:a8:56:25:e1:24:81:4a:7e:54:18:cc:0f:
6c:e4:70:7f:3a:dd:96:fb:e5:d3:44:fd:0a:63:d5:
09:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F8:8E:05:C8:98:79:6C:82:FF:01:47:56:88:16:E9:33:42:0E:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f7c11f-4e9e-436d-a3df-fedbd4c66a0e/1/UPiOBciYeWyC_wFHVogW6TNCDhg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.18.16.0/20
185.211.152.0/22
194.60.71.0/24
194.110.214.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44316
Signature Algorithm: sha256WithRSAEncryption
1f:d1:16:51:00:a0:fa:a8:4f:fc:e2:ac:89:d1:b3:dc:40:6c:
46:54:13:5e:48:04:34:36:7d:2d:50:31:55:93:56:5a:9b:11:
a3:ba:0c:f0:14:27:32:0d:f7:af:a6:53:b0:a4:8e:bf:72:0b:
73:80:4e:7e:eb:f9:7e:c8:e7:9b:7e:9a:d3:ab:f0:8a:55:5a:
be:fb:3f:a7:43:55:5b:59:60:34:d1:bc:26:65:17:c8:84:5c:
c5:3c:d7:fe:1f:ea:92:76:aa:21:6f:e3:9f:47:e8:36:6b:f3:
e9:e3:39:33:5b:42:3f:a4:2e:7e:51:d3:5c:b5:8d:99:5b:56:
42:c5:2f:25:65:34:e7:eb:39:86:75:cf:22:e6:c7:05:3a:6f:
35:c8:96:e2:3a:ec:a4:bb:5f:d5:37:39:07:8c:5d:fc:69:8b:
46:ec:9f:14:94:5b:ce:69:55:3b:e9:7c:a8:9c:05:5e:0d:43:
2b:ec:36:d6:ff:03:b3:24:34:af:c7:a5:20:2b:5d:10:c0:db:
42:b1:a1:cc:4a:da:02:7d:73:9f:cc:b3:0e:26:f1:e8:dd:98:
07:a2:d1:35:96:05:41:44:4a:44:0d:b9:16:b7:8a:a5:fa:d1:
45:72:ba:5b:74:5d:8e:f5:45:a8:e0:60:17:5e:21:38:c4:30:
6c:b3:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 09:30:56 2025 by rpki-client