Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
File: VtV_bPKMmCwdP_bFJX85npuVW90.cer (raw, json)
Hash identifier: Y9UEGVlNHhKT1qbHjv1fkgTHTWnKOKsD48L+DXdHUno=
Subject key identifier: 56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E20E15C7525E1C52885891ACD0B1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39015
AS: 51375
IP: 37.131.0.0/17
IP: 46.42.64.0/18
IP: 46.184.128.0/17
IP: 87.237.192.0/21
IP: 93.188.192.0/21
IP: 94.76.0.0/18
IP: 95.84.64.0/18
IP: 109.63.0.0/17
IP: 178.132.32.0/20
IP: 185.36.88.0/22
IP: 185.143.124.0/22
IP: 188.116.192.0/18
IP: 2a02:2578::/32
IP: 2a02:c400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:20:e1:5c:75:25:e1:c5:28:85:89:1a:cd:0b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:99:dc:55:e1:51:73:36:c0:12:af:75:04:9e:
46:1c:a1:60:d6:a9:62:d2:5c:1b:68:db:56:21:88:
7c:f4:7a:37:9b:4f:81:b7:27:1e:a5:13:95:dc:c9:
8c:8e:21:73:11:cd:ba:39:e8:87:b7:20:e6:c9:f3:
b4:79:9d:84:2b:30:00:c7:21:48:eb:00:43:f8:17:
c5:3f:ab:a9:62:62:0f:0f:87:7d:e8:8d:c4:b1:95:
c8:6a:5f:19:b5:cc:47:5f:e8:68:30:6f:c7:9a:53:
99:ed:2c:d9:54:92:1a:12:a9:21:f2:72:db:e4:15:
2e:f3:8b:59:71:16:fc:c5:43:07:f3:d7:26:22:1d:
66:eb:49:22:7d:6c:63:75:99:90:61:46:c7:d1:43:
15:2d:10:b6:a5:0a:61:c9:77:ce:a9:27:b0:63:40:
7c:d2:e0:ef:ad:da:e5:bc:2f:ea:fe:2b:ce:8f:47:
30:14:e8:bd:a9:6d:c5:f2:f0:c1:49:ee:ac:b7:03:
50:0c:0c:63:f8:66:4e:64:f5:65:cb:50:b2:62:c1:
d9:fe:bd:63:9e:83:3a:42:8b:4e:9c:c0:b2:57:09:
d2:d1:0f:43:bd:36:5d:ff:4f:18:01:d9:72:6b:dc:
c3:db:28:e8:2e:ef:b5:f0:0a:cf:b4:9f:19:7f:4c:
be:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.131.0.0/17
46.42.64.0/18
46.184.128.0/17
87.237.192.0/21
93.188.192.0/21
94.76.0.0/18
95.84.64.0/18
109.63.0.0/17
178.132.32.0/20
185.36.88.0/22
185.143.124.0/22
188.116.192.0/18
IPv6:
2a02:2578::/32
2a02:c400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39015
51375
Signature Algorithm: sha256WithRSAEncryption
11:a9:f3:56:c8:4b:1e:c9:c2:1a:ab:47:20:f1:e3:7e:91:b9:
85:82:77:94:76:2d:05:b9:ea:31:be:af:4b:cd:db:cc:ce:48:
56:7b:b2:95:dc:67:53:74:8d:fc:06:92:73:bb:4d:94:4d:85:
eb:5b:36:a7:fb:02:47:d3:8c:92:3f:15:af:ea:2c:9f:ce:26:
ec:81:4b:ce:65:2d:e6:69:b4:09:fc:78:5f:a0:ad:00:42:aa:
25:d7:d6:d0:f5:49:ce:37:f9:df:cf:95:c0:d4:b8:b3:52:56:
9c:01:0f:a8:22:ec:f1:68:f3:e3:88:82:39:3a:5c:c0:31:20:
41:90:d3:02:6e:ef:91:81:b6:ac:d8:01:bf:ee:59:31:e7:9a:
ba:35:be:e3:8e:71:fc:cb:81:90:20:ff:0e:20:e5:8c:08:7e:
27:9b:d9:52:e9:aa:73:1e:c7:4c:b9:d9:2f:e5:8d:84:f2:8a:
95:24:fe:d4:c2:3d:1b:e1:72:b7:83:04:2c:e1:35:06:69:03:
8a:fe:61:39:35:da:03:04:4f:7d:e6:01:ec:95:16:28:70:f6:
36:1c:b3:de:9f:1c:7d:0b:bb:1c:26:d4:e9:71:d0:57:91:16:
54:df:91:7b:3e:e4:90:8f:fc:66:22:60:d3:2b:0f:f5:32:6a:
fd:0f:88:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:30:22 2025 by rpki-client