Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yv8lPFoTQ6JWma4I51dnrya52-U.cer
File: Yv8lPFoTQ6JWma4I51dnrya52-U.cer (raw, json)
Hash identifier: mSiYVtwkXSYSGj5AhOn8v6Atp5J4hgRNfTC83iNXge4=
Subject key identifier: 62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B665E22A9DFE0B342433F1A1DE7EA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.32.19.0/24
IP: 195.182.43.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:65:e2:2a:9d:fe:0b:34:24:33:f1:a1:de:7e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62ff253c5a1343a25699ae08e75767af26b9dbe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7e:f4:19:0f:07:4c:ea:39:98:2c:2c:c6:2c:
e5:ce:d9:6c:a1:87:58:95:29:8b:a0:96:2a:cc:1f:
fc:d0:f7:77:1e:af:36:c6:4f:9f:17:14:91:82:e8:
06:03:5c:bf:b9:30:be:07:09:53:a1:4b:e5:92:ad:
a0:1a:cc:ce:63:65:d6:31:7c:f2:d0:87:05:a1:86:
f0:73:11:d6:14:ba:cf:e4:d7:4e:99:92:84:86:79:
a2:1c:55:92:22:1e:b0:e0:42:16:30:2a:cb:b8:46:
fc:89:45:64:da:4c:ac:08:7c:08:69:3c:0e:cc:75:
7b:8e:af:1a:86:14:a0:ab:d0:ea:76:fc:a4:6d:2a:
7f:7b:49:1c:d6:f2:f0:9f:d6:1e:64:ba:f5:45:5e:
19:ce:cd:3c:08:64:d2:0e:a2:24:5e:bb:46:e9:8e:
fc:4a:5c:61:cf:cb:4e:93:39:cf:8f:fa:5b:7c:da:
55:a7:16:3b:3c:ea:68:53:f6:1c:00:58:e1:9d:4e:
a0:25:b1:8d:1e:bc:35:1a:af:0b:75:2a:a4:85:d8:
23:c9:91:93:91:e2:bf:07:22:57:3f:d8:4f:7d:73:
46:ad:94:fc:94:57:d7:96:07:5a:d0:37:82:0b:53:
23:9b:c9:91:82:41:9d:b4:c6:38:f5:49:f9:db:7c:
b8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:FF:25:3C:5A:13:43:A2:56:99:AE:08:E7:57:67:AF:26:B9:DB:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f76a8e-1884-41bb-8113-f8d755b3d2a7/1/Yv8lPFoTQ6JWma4I51dnrya52-U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.19.0/24
195.182.43.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:24:ce:4b:8f:ba:1a:59:a1:fc:4b:cc:f5:5d:d0:47:0f:69:
93:65:a9:ba:20:18:f4:48:58:95:72:ef:6c:b9:8f:cc:7f:d2:
41:14:05:f2:ee:93:11:b8:7a:a2:92:b5:e5:bf:b7:2f:52:53:
d6:fa:54:fb:37:44:35:d2:38:36:30:41:38:92:a3:a3:57:0d:
12:72:e6:27:db:af:57:66:7b:f6:3e:10:8f:a6:dc:fe:6b:23:
ad:ab:e8:e0:22:53:aa:5f:54:e3:c7:01:fb:dd:a8:22:f4:b7:
c6:31:70:f6:83:d7:76:a7:e4:75:a2:14:8a:ba:43:ff:99:be:
d6:0c:ff:cb:bb:d6:ee:f9:10:19:cf:69:7b:91:18:90:d6:7b:
4b:6c:65:13:a2:16:b8:f8:ec:51:d7:dd:d3:a0:ee:42:38:58:
7b:0d:2f:c2:41:22:5b:68:a6:c6:8a:e8:02:1a:d2:68:fa:15:
68:10:b6:00:74:c9:d1:80:3c:8d:c9:83:9e:33:53:13:09:a6:
6d:39:dd:27:f1:cc:a7:69:94:aa:9f:da:c6:30:c1:6c:cc:26:
80:22:6f:af:b5:e4:80:0f:4c:b2:05:da:9e:d4:77:db:52:4c:
f5:f2:86:84:f1:31:e5:d8:7e:1e:ea:d4:e2:17:77:7e:78:bf:
52:0f:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:40 2025 by rpki-client