Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
File: VGg05oiQ85hqGwRXzg9UrgPC12s.cer (raw, json)
Hash identifier: nXp/NajCyzjl16Bhb4Kz4hx77jDEXKmAfQAj2WvWi4o=
Subject key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B20C16213E455CC8CE353218DDD6D1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 6778
AS: 20804
AS: 35253
AS: 35281
IP: 81.15.128.0/17
IP: 82.177.0.0/16
IP: 88.220.0.0/16
IP: 193.223.0.0/24
IP: 194.183.32.0/19
IP: 195.136.0.0/16
IP: 213.172.160.0/19
IP: 2a00:4120::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0c:16:21:3e:45:5c:c8:ce:35:32:18:dd:d6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f5:8f:b6:a8:3f:ef:9a:a5:56:6c:3c:87:0f:
61:f3:3a:a4:ee:64:c6:8c:09:01:d1:78:29:8a:65:
30:62:4d:1b:d0:95:9b:95:8e:a0:87:a2:9e:2b:a8:
69:a8:90:ec:11:34:f2:00:19:8a:89:88:23:9d:bc:
7d:6c:aa:e4:0a:73:d8:0e:fb:15:f3:da:98:52:92:
70:ab:31:92:38:fd:7d:11:b6:e5:61:b3:25:1d:b2:
c3:f6:0d:2b:20:c6:f6:e1:19:b8:26:ef:a4:42:6f:
f2:4e:51:d9:5a:91:0f:ad:8e:80:56:66:7d:3a:38:
f6:e6:a2:62:19:f7:6a:17:e9:33:2e:2d:1b:15:8c:
16:2a:b4:61:c1:29:78:cd:97:66:d8:2f:5d:6c:ff:
a2:81:b7:74:1f:a9:24:90:9a:2e:18:b7:07:75:90:
77:e0:3a:58:3d:9d:7e:95:b1:fc:12:12:bb:cc:a4:
80:97:37:60:ca:bf:fc:e6:b6:38:87:51:d7:c3:71:
8e:da:53:c5:74:41:3c:61:7e:14:85:ba:3d:f3:fc:
5f:89:e6:cf:02:a0:c1:c4:e2:0b:6d:5a:db:4e:bc:
41:00:4a:82:c8:8a:2f:f0:b7:65:fc:be:14:d4:e3:
36:e7:4f:79:98:4c:d4:db:d7:ca:61:75:27:25:09:
8a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.128.0/17
82.177.0.0/16
88.220.0.0/16
193.223.0.0/24
194.183.32.0/19
195.136.0.0/16
213.172.160.0/19
IPv6:
2a00:4120::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6778
20804
35253
35281
Signature Algorithm: sha256WithRSAEncryption
82:c8:6a:b7:1a:bb:ec:91:63:47:7c:cb:ab:e3:f1:98:b3:9b:
0c:f3:40:6d:60:39:ca:0f:ab:ae:a5:c0:5d:2e:09:91:0f:f8:
ff:18:37:03:1a:bc:8c:e1:1e:e4:af:ce:28:8b:3a:77:3f:a8:
ef:a2:19:79:cc:13:f8:d7:6f:6e:f6:6b:7c:07:92:25:02:f3:
25:ff:57:30:f9:e5:42:05:3d:cd:95:bc:9d:a8:d2:b3:02:3f:
9a:64:f1:b6:6d:ca:93:cf:51:cb:2c:05:eb:1b:6a:9e:08:ef:
83:e9:41:79:d6:7c:4a:2b:a5:40:09:88:b0:ed:49:15:25:0a:
b5:45:aa:33:40:be:c4:e0:fd:58:18:4c:ee:58:02:5a:fd:72:
9a:99:46:0b:4b:1b:34:b4:28:57:2e:c5:06:5e:52:bf:dc:ca:
41:a8:1d:65:4e:16:50:ef:77:46:f1:b7:6a:42:b6:8f:3b:1d:
00:b9:59:eb:51:d8:f6:93:b5:3d:c7:6e:a3:2c:39:a0:5c:ec:
0e:59:c5:97:0a:37:67:f3:25:3a:f6:50:99:6c:78:10:0a:b0:
86:c9:3a:95:20:14:bf:1d:28:18:ee:23:fe:18:90:e4:92:78:
1b:bf:96:a0:a3:e3:e3:8c:1b:d2:97:22:72:ad:4c:bb:e4:79:
95:54:f8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 04:48:39 2025 by rpki-client