Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V8H-gINkZ0mBatP6ZAmDRfth6fU.cer
File: V8H-gINkZ0mBatP6ZAmDRfth6fU.cer (raw, json)
Hash identifier: KgkfJHkTVwAjQXVOPKXiojNyc0ON+E6Ff7TjLjeSmgQ=
Subject key identifier: 57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F5EA65454FDD276E10065BAD48175
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57099
IP: 91.229.222.0/23
IP: 146.255.104.0/21
IP: 164.138.80.0/21
IP: 185.16.224.0/22
IP: 185.47.216.0/22
IP: 185.56.40.0/22
IP: 2a04:3c0::/29
IP: 2a04:d840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:5e:a6:54:54:fd:d2:76:e1:00:65:ba:d4:81:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57c1fe8083646749816ad3fa64098345fb61e9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:78:a6:21:d4:d6:cf:5e:10:33:33:6c:e2:
5d:3d:cc:6d:4b:c6:63:72:61:b3:ae:90:19:04:54:
cb:b8:74:20:ea:37:d9:50:99:d2:c3:5c:06:c0:d4:
61:8a:40:70:85:d9:cd:9f:b6:94:7b:7b:c0:e7:6a:
34:d7:98:a9:b1:68:3e:79:c9:42:b8:3d:d9:74:5d:
e1:ca:15:c5:87:8f:a2:4d:cf:4f:e2:8a:76:e9:eb:
96:99:61:cc:c8:f2:fa:a6:95:66:9d:a3:b3:08:5c:
26:d4:de:23:36:db:62:3a:fc:4b:bf:51:78:40:1c:
80:43:ba:fc:c0:6c:d0:24:38:34:b9:24:f1:eb:71:
9e:49:91:51:72:28:aa:81:42:6e:76:ed:95:fc:82:
dd:93:44:bd:da:38:b8:a1:5d:37:a7:f2:32:4e:fd:
10:db:49:c3:03:2e:37:ca:4e:68:11:bf:f5:9a:f1:
b7:19:20:e3:e4:b4:78:16:71:49:6c:60:76:58:04:
5b:a3:10:33:95:95:95:ff:d9:9b:39:0f:13:75:0a:
6d:d9:eb:cb:5b:6b:19:92:4b:54:36:b1:81:fa:84:
5c:28:dc:e9:fd:b9:f3:77:47:97:06:40:8c:8a:e3:
09:74:3a:08:6a:85:90:cc:87:3f:4e:2e:71:45:f7:
d9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C1:FE:80:83:64:67:49:81:6A:D3:FA:64:09:83:45:FB:61:E9:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1b4708-eef9-49de-b887-f32069ec4ee5/1/V8H-gINkZ0mBatP6ZAmDRfth6fU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.222.0/23
146.255.104.0/21
164.138.80.0/21
185.16.224.0/22
185.47.216.0/22
185.56.40.0/22
IPv6:
2a04:3c0::/29
2a04:d840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57099
Signature Algorithm: sha256WithRSAEncryption
32:6b:9e:83:a3:a2:3e:a5:62:79:9e:8d:57:e4:9c:47:80:68:
ae:71:fb:87:04:6c:42:db:a6:35:90:36:99:8e:48:8e:b0:16:
ac:60:21:5b:d9:04:a7:3b:0e:57:81:29:f6:07:51:a8:02:33:
e1:22:83:a0:01:2d:2b:c2:68:6a:76:78:12:6a:b3:71:b3:87:
20:70:7d:06:6c:5d:dc:80:7f:08:e2:58:c3:5f:55:d3:dd:44:
c2:00:dc:7b:0d:b2:71:7a:95:c2:c3:cc:fa:46:07:cc:6b:c4:
8f:e7:66:33:5c:66:3e:73:b5:5b:e4:e0:00:fe:62:fc:45:b3:
e3:51:ea:da:ef:96:57:61:e5:61:8a:e7:d5:94:08:75:c1:d7:
8f:1e:fc:87:14:fd:f0:de:3f:32:92:5d:30:72:6b:59:45:60:
a9:d3:da:38:ca:53:d2:65:62:b9:ef:ac:25:0c:3a:51:a7:24:
29:69:2f:85:90:3b:06:d7:f3:6f:54:02:71:27:f8:d3:4b:62:
26:bf:df:11:2a:13:11:bd:a0:97:7d:df:98:8c:f5:3a:72:09:
4f:c9:0c:19:70:b4:e3:e8:35:43:84:27:8f:29:6c:a0:bd:84:
3a:73:e4:c9:8d:e6:a7:87:aa:4d:db:43:33:b1:ba:44:0d:79:
c1:c5:75:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:35:47 2025 by rpki-client