Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
File: WTiXF0-WdJDb9hidR53yyTcb9AQ.cer (raw, json)
Hash identifier: 7nP6CSuH90l5iDN8605E+GNq/L37lI2vVLiuHbZDIj0=
Subject key identifier: 59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB55A6E6CF474488A3BD5B2F601073
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201681
IP: 185.67.36.0/22
IP: 2a05:bc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:55:a6:e6:cf:47:44:88:a3:bd:5b:2f:60:10:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=593897174f967490dbf6189d479df2c9371bf404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:b5:39:3f:71:9b:31:70:37:e4:67:f0:1c:
a4:45:c0:45:95:04:13:bc:53:f7:cc:98:f3:dc:26:
66:bc:62:81:59:8d:ac:f1:22:78:ef:81:32:97:83:
6c:a6:27:57:f6:fa:48:3b:2d:11:15:ae:63:2a:8e:
0f:72:64:fd:ca:7e:59:2d:44:71:d7:17:7e:14:de:
b5:55:ee:16:5b:72:8d:43:06:02:ad:0f:9a:35:7b:
bb:ed:e4:14:5d:94:3d:f1:7b:80:50:84:bc:d0:33:
dd:19:1b:25:60:d0:5a:3e:74:2e:9b:37:f1:31:aa:
2d:d0:52:10:d8:a1:cb:14:cb:b1:f6:5a:c9:33:35:
ff:e8:76:d9:da:d4:00:cf:e2:b4:dd:25:3b:38:09:
f9:62:4a:71:55:88:cd:a3:a9:f2:6e:f2:58:0b:fe:
2b:01:61:88:04:62:01:81:76:7a:9a:a5:87:ae:be:
40:b0:e9:a3:e6:2b:5d:65:e8:30:1c:e9:cd:ad:b2:
3f:02:d3:51:38:e2:b8:cb:44:54:0e:6c:73:48:87:
42:ef:3f:a0:f9:20:79:4f:d3:fa:5e:c1:5f:7a:90:
cf:a8:a0:54:0d:2b:c9:50:6d:9a:fe:56:19:aa:44:
a9:ce:0f:aa:62:2a:0e:c0:c8:14:66:0c:b0:06:aa:
90:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.36.0/22
IPv6:
2a05:bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201681
Signature Algorithm: sha256WithRSAEncryption
67:f7:f0:ec:d2:11:63:d0:93:ea:b1:f9:39:cf:be:4c:82:77:
85:0e:f7:35:c1:e0:dd:32:6e:36:8c:19:ba:7d:df:bb:04:3a:
bd:55:27:9a:7a:28:8f:71:ae:09:b8:c4:a9:09:ae:54:b2:9f:
2c:e4:30:9f:ea:7e:09:0f:79:2b:7d:36:e1:d2:bb:22:dc:12:
49:10:65:2a:9e:75:9e:a0:61:10:81:e8:23:e7:fa:24:bf:65:
c4:0f:3d:ca:15:6a:d9:cf:24:ba:1c:71:45:97:64:9d:34:3c:
b5:4f:71:64:73:11:58:d7:dd:4c:2f:a3:ac:3f:12:c5:98:bc:
f4:c1:c7:9b:21:f8:fc:a5:20:3c:fc:71:c3:47:64:da:11:28:
3e:00:33:09:6e:0c:58:2a:5d:22:b1:3d:25:80:02:7e:1e:56:
e1:cf:fd:2e:a1:f9:8e:84:f4:eb:71:2b:85:6c:0c:93:25:0f:
b1:83:41:29:1f:02:46:c9:d6:5c:0f:eb:5a:8d:95:9b:69:da:
9a:6c:fb:2a:1c:66:ba:ec:f2:aa:d2:51:2d:e5:40:49:7a:1f:
5d:9a:80:ef:cf:bb:c8:33:d5:97:2b:15:2e:7e:73:1a:e6:10:
cc:f2:4c:a6:d7:3e:1d:52:f9:6f:c7:29:13:64:73:56:57:08:
d5:2f:60:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:31 2025 by rpki-client