Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YYhVY15HlPWHjjuYX-2JNa4GxaE.cer
File: YYhVY15HlPWHjjuYX-2JNa4GxaE.cer (raw, json)
Hash identifier: atp18CXALCvDR1IazOEmaJ/Hu/Y9hDOnRwol56moisI=
Subject key identifier: 61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067DA89CDA578C1F0573AAD16A96DE2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.142.128.0/22
IP: 2a12:21c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:da:89:cd:a5:78:c1:f0:57:3a:ad:16:a9:6d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=618855635e4794f5878e3b985fed8935ae06c5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:d6:f7:35:d6:65:5a:72:06:88:e0:0f:d1:
e7:b7:dd:0d:6f:f8:ae:c9:5e:e2:64:6c:be:2a:ec:
65:09:ce:58:9f:02:42:9e:cc:59:a0:a1:bc:34:49:
fe:7f:77:21:20:70:d0:be:4a:d8:eb:0a:60:1d:8b:
d5:7c:82:9b:5a:40:1e:9e:6c:22:80:28:71:59:07:
86:0e:96:8c:d8:48:b9:94:94:99:73:a1:9c:cf:5b:
58:20:ce:4d:d8:32:88:4c:99:ce:85:77:b7:9f:67:
0c:d0:13:fe:2e:14:4f:8a:b2:84:25:9d:1e:34:c1:
17:d9:0c:bd:29:5d:07:ca:69:b9:d1:28:12:e6:c2:
fa:fd:39:6f:74:77:ad:b8:06:85:29:55:39:f1:97:
5d:4e:0a:f5:12:b5:77:13:12:34:b4:fc:0d:a3:53:
bb:f0:76:aa:7a:7b:a0:5c:78:bf:c5:bc:10:90:97:
07:24:39:c5:80:d8:45:a2:96:78:ce:87:34:b3:49:
69:62:a5:bb:f5:a8:c3:84:22:71:c4:5f:42:e3:b8:
05:77:ef:3e:3e:b3:6d:ac:97:1c:d0:1c:e6:e6:6c:
63:69:d8:5c:85:47:ec:72:65:60:e1:5d:31:fc:06:
c5:5a:0e:f0:4c:6c:f2:1a:5b:42:c5:b5:ec:4e:83:
18:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:88:55:63:5E:47:94:F5:87:8E:3B:98:5F:ED:89:35:AE:06:C5:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bf8bca-c4a0-429d-9f4d-0eb6bbf65b1f/1/YYhVY15HlPWHjjuYX-2JNa4GxaE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.128.0/22
IPv6:
2a12:21c0::/29
Signature Algorithm: sha256WithRSAEncryption
61:5f:90:35:46:38:1b:44:48:37:a5:f3:e0:11:6b:df:29:1f:
d5:db:e4:9c:22:0a:2d:9a:2d:e6:4e:c2:d0:11:c5:ca:ab:04:
93:1a:e9:e7:19:ec:db:20:ac:32:24:bf:62:5a:2b:d5:29:4b:
8d:4d:0d:c6:5d:01:e4:df:d7:d7:97:92:a0:7f:b0:fc:ab:86:
da:c3:2d:e8:f2:4d:24:04:10:93:af:d4:85:01:3d:e3:25:22:
cc:08:19:96:cd:a6:91:d2:00:70:5b:8a:ea:82:86:ce:8f:a9:
3b:63:8e:a8:35:af:91:8f:84:9f:64:2f:ce:f9:8a:b1:42:c4:
b4:dc:a5:0d:9a:ac:63:fd:58:cb:c2:51:72:65:ed:a6:fe:0b:
7d:53:8d:e9:69:62:f4:21:88:ae:11:76:65:55:12:f6:38:1c:
3f:58:67:ff:86:ea:a5:bf:d3:f6:d4:b6:9c:af:8d:99:5d:46:
79:bc:1c:69:af:71:43:f0:85:ba:f1:1e:ee:de:80:83:19:2d:
88:f6:7a:6c:ad:6d:5c:59:25:04:f6:f7:e1:d2:3f:bb:2c:3f:
0e:57:24:f3:e9:a9:6f:26:ae:2e:e9:5f:ab:e0:08:0b:47:26:
c4:db:74:1d:7c:3d:5f:a7:a9:82:8d:0b:a8:e8:ab:8f:9e:61:
ab:46:5f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:59:39 2025 by rpki-client