Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YyzYf-q-QHUi4GVT8usFoMFgL78.cer
File: YyzYf-q-QHUi4GVT8usFoMFgL78.cer (raw, json)
Hash identifier: hLJSq4UQ9tHpzZGqh3AHX/dE9pH7EI/DvRGXk0T8MXs=
Subject key identifier: 63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942445296E476302E6E616426AAC836313
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a11:7680::/29
IP: 2a11:8300::/29
IP: 2a11:8440::/29
IP: 2a11:9fc0::/29
IP: 2a11:b780::/29
IP: 2a11:c440::/29
IP: 2a11:c540::/29
IP: 2a11:c700::/29
IP: 2a11:cd00::/29
IP: 2a11:d080::/29
IP: 2a11:e7c0::/29
IP: 2a11:fec0::/29
IP: 2a12:10c0::/29
IP: 2a12:15c0::/29
IP: 2a12:1880::/29
IP: 2a12:1940::/29
IP: 2a12:25c0::/29
IP: 2a12:2c40::/29
IP: 2a12:34c0::/29
IP: 2a12:3ac0::/29
IP: 2a12:4240::/29
IP: 2a12:4500::/29
IP: 2a12:4c00::/29
IP: 2a12:5580::/29
IP: 2a12:6600::/29
IP: 2a12:7980::/29
IP: 2a12:8800::/29
IP: 2a12:9700::/29
IP: 2a12:9e00::/29
IP: 2a12:c180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:29:6e:47:63:02:e6:e6:16:42:6a:ac:83:63:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=632cd87feabe407522e06553f2eb05a0c1602fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:05:6f:a6:55:01:cc:c8:24:c2:33:f9:63:51:
11:3a:9f:2e:68:52:2f:99:d5:94:dd:22:8b:4a:e8:
98:af:4a:f6:7b:d6:0e:26:d7:cf:e1:09:de:04:f7:
b9:25:f3:09:3c:d4:d1:ec:6e:37:50:f8:0a:63:14:
64:05:da:85:83:df:fb:b2:f1:14:2d:dd:4a:28:b8:
9c:00:69:b5:5f:92:75:73:cc:41:0a:fc:f6:7a:db:
88:88:3f:cc:29:f0:75:3e:a1:7e:d1:b4:40:77:28:
e5:7b:49:83:04:24:d7:a2:a0:e6:ad:11:75:0f:c6:
3b:c8:7a:b8:5f:72:5f:27:b8:56:19:1b:3b:6e:5a:
8f:fe:24:8e:f7:a4:25:fd:72:4d:ae:6e:5e:cb:cf:
79:96:6e:94:dc:0e:7f:19:a6:4c:e9:d7:22:a4:2d:
dc:05:4f:fe:a4:4a:7b:fb:7a:86:f5:89:84:ae:2d:
e4:1c:ab:16:c3:5d:7a:16:c2:7f:02:f3:31:a3:87:
a7:03:e8:7d:92:31:59:3a:2f:31:af:93:89:88:b4:
89:9f:ed:31:dd:75:9d:40:5b:e7:a7:86:26:96:d4:
1c:9e:00:9e:f4:59:25:94:a8:ad:40:04:cf:8d:2e:
fb:bf:28:86:78:62:9c:b8:5f:dd:5f:06:12:f9:12:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2C:D8:7F:EA:BE:40:75:22:E0:65:53:F2:EB:05:A0:C1:60:2F:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fddf47-ff64-447a-b98f-55104173b180/1/YyzYf-q-QHUi4GVT8usFoMFgL78.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:7680::/29
2a11:8300::/29
2a11:8440::/29
2a11:9fc0::/29
2a11:b780::/29
2a11:c440::/29
2a11:c540::/29
2a11:c700::/29
2a11:cd00::/29
2a11:d080::/29
2a11:e7c0::/29
2a11:fec0::/29
2a12:10c0::/29
2a12:15c0::/29
2a12:1880::/29
2a12:1940::/29
2a12:25c0::/29
2a12:2c40::/29
2a12:34c0::/29
2a12:3ac0::/29
2a12:4240::/29
2a12:4500::/29
2a12:4c00::/29
2a12:5580::/29
2a12:6600::/29
2a12:7980::/29
2a12:8800::/29
2a12:9700::/29
2a12:9e00::/29
2a12:c180::/29
Signature Algorithm: sha256WithRSAEncryption
88:42:13:04:67:2f:e0:b1:61:14:66:d2:64:a3:6f:aa:e8:15:
6c:a9:10:d5:3b:80:d0:ff:7c:ba:6c:d3:d0:d8:b5:2b:75:53:
8d:3b:59:32:b1:03:32:41:d0:70:f4:5a:7d:db:14:66:5d:24:
8e:5a:b5:d2:08:f8:38:10:57:a8:90:0d:e0:4c:e5:97:0d:b8:
8e:ba:79:40:38:ae:fa:e3:df:53:b6:a3:01:58:f5:d0:30:2b:
27:4b:35:57:0e:9b:9f:a4:c5:02:4e:32:fd:89:57:cb:94:dd:
75:d3:54:f8:f9:1e:5c:74:56:93:34:84:a6:4b:90:07:c3:08:
0b:bd:76:f1:a2:10:a6:ba:98:6d:5d:66:49:44:f8:36:96:65:
9b:73:7f:c7:b3:fa:cc:55:e1:b9:1a:45:18:9a:39:13:33:df:
e1:8d:89:06:67:4f:4a:ac:97:e8:2f:d7:3f:bf:2d:1b:d4:8a:
a0:2d:f5:83:c0:85:50:d2:e9:f2:95:eb:1b:3d:0e:42:5e:fc:
59:ae:af:c6:49:be:fd:88:84:fa:4e:85:e1:54:e6:db:e9:c1:
22:21:30:44:00:be:19:db:3a:8b:93:06:7d:cd:6f:ab:16:f0:
46:cd:6b:19:f7:30:f6:a3:28:83:94:01:79:d1:c1:d8:1d:89:
c0:07:10:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:17 2025 by rpki-client