Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YxGmnIFyBEhUkx8QClm9CJy4iBo.cer
File: YxGmnIFyBEhUkx8QClm9CJy4iBo.cer (raw, json)
Hash identifier: Wp0G6sHfoz/pmsldnkIjK0YJeuHQrpUUpp+qRmPoYjE=
Subject key identifier: 63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FB75DC18859D1D76E6EFB17671472
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 2038 -- 2040
IP: 131.154.0.0/16
IP: 141.108.0.0/16
IP: 192.84.127.0 -- 192.84.156.255
IP: 192.135.8.0 -- 192.135.37.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b7:5d:c1:88:59:d1:d7:6e:6e:fb:17:67:14:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6311a69c8172044854931f100a59bd089cb8881a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:6a:68:24:ca:86:e9:fb:01:ad:ee:a7:cd:c1:
59:44:bb:4f:50:d7:ca:de:eb:4d:8a:c6:c1:60:d2:
c1:9c:18:57:57:30:f8:49:e3:66:be:a4:8c:9b:0e:
c4:46:ab:3f:f5:1f:77:25:db:3d:63:ee:b5:49:04:
27:3c:9b:89:d5:1a:ef:65:93:b3:1b:01:a9:78:b8:
2a:19:5e:62:c9:89:83:17:bd:dc:cd:a3:0d:fc:04:
7a:dd:d1:1b:31:9a:60:c9:97:44:80:09:16:21:23:
eb:5d:94:d6:56:1f:b8:48:a3:d8:10:72:39:0e:6f:
c0:d0:51:58:6e:03:85:51:e1:f4:f1:8e:e0:1a:f3:
c6:be:cc:fa:40:08:c8:1e:1e:a8:1d:46:5b:50:e5:
30:64:00:a5:74:37:63:05:f8:2e:1f:31:4b:28:41:
d3:8e:b4:7d:d9:9e:f7:db:d2:f0:47:bb:0c:be:41:
ff:36:43:53:2e:a8:0b:18:72:25:57:8a:c3:1f:4c:
9d:a0:bb:ca:2b:89:91:26:8b:7e:6e:ac:ed:7b:82:
2d:73:ef:ee:f2:ec:2d:32:b6:91:51:34:73:2d:56:
07:60:4a:ac:ab:7c:1f:62:96:4c:aa:d7:59:76:10:
94:d8:e8:aa:40:01:ef:59:2d:ae:72:11:d3:ad:ea:
83:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:11:A6:9C:81:72:04:48:54:93:1F:10:0A:59:BD:08:9C:B8:88:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c4abfe-a8e6-4a14-8b5c-d0e0f213936c/1/YxGmnIFyBEhUkx8QClm9CJy4iBo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.154.0.0/16
141.108.0.0/16
192.84.127.0-192.84.156.255
192.135.8.0-192.135.37.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2038-2040
Signature Algorithm: sha256WithRSAEncryption
25:65:36:9f:ff:e2:02:1d:3c:27:82:0b:0a:a3:fc:bf:e4:78:
61:a5:4f:3a:a8:07:c6:46:9c:d4:aa:bf:29:2a:d8:c7:a5:cc:
21:7c:fe:af:76:6d:6f:4b:10:57:0a:9d:54:75:f2:f8:76:29:
a6:be:a2:f1:82:4b:4e:ab:18:e8:70:76:9d:4b:12:5d:ec:d0:
eb:e8:df:fc:36:41:af:a6:a8:d8:5c:2a:c7:62:3f:be:04:1c:
51:26:27:6f:de:5d:7a:cc:0f:aa:51:b8:7b:ce:a8:8a:f5:91:
8f:a1:58:38:06:9f:4c:56:5f:82:9f:42:9e:86:e3:55:ba:a1:
82:a3:e9:22:9e:e2:f7:5a:2b:3f:87:35:e8:19:7e:fc:03:54:
6e:f0:22:77:41:dd:d5:99:6e:33:a3:6a:a8:db:95:7e:41:6c:
2f:f9:2e:fa:0f:17:ec:8f:e5:9d:be:ff:c6:fc:07:95:fe:6e:
75:24:45:56:40:46:c2:0e:b0:61:ca:ad:b6:eb:29:74:73:3c:
ac:f1:da:d0:f3:4f:44:8b:9f:2e:e0:7b:c8:c8:d2:80:72:3e:
76:d4:de:62:01:06:8c:50:3e:8e:a5:6d:2a:0f:77:79:34:64:
ad:22:bf:c5:66:78:f5:1d:9c:67:55:b0:70:8b:09:1b:39:98:
42:aa:69:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:38:17 2025 by rpki-client