Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
File: ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer (raw, json)
Hash identifier: pTWLPAokqFWq9vwt4qgdVNqAMiGC8IBzVAtYw1quRes=
Subject key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214469A7085323A576DC10C7BBC291EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51409
IP: 45.146.156.0/22
IP: 178.255.56.0/21
IP: 185.41.224.0/22
IP: 2a01:5de0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:69:a7:08:53:23:a5:76:dc:10:c7:bb:c2:91:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=646579561eca5879a747025e5798487b19cd2a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:11:6f:d2:cd:c3:9a:60:da:00:93:47:55:81:
46:43:8e:3b:b1:7a:81:59:4d:3e:a7:aa:af:b3:a3:
ef:ea:a8:8c:80:66:3a:65:fb:94:64:3e:9d:19:19:
6b:df:5e:6b:f4:ad:e4:b1:0b:d4:ff:ed:ed:0b:5c:
d3:c1:20:7a:50:79:47:e4:a9:9f:3b:ae:57:f1:21:
ed:22:1f:94:a2:57:31:cf:46:97:e4:6f:e4:89:aa:
b8:74:b0:89:c5:89:82:15:5e:b9:7f:89:9c:dd:de:
0f:66:f3:72:c5:2b:70:d8:3e:c1:2a:ec:d9:19:8f:
5a:cc:94:52:79:32:92:da:bb:60:86:ef:fc:56:13:
48:28:cf:8e:48:a3:5b:2f:51:3f:9a:93:5d:d2:b3:
56:b3:a0:04:02:bd:9a:87:ec:90:4a:03:1e:cc:57:
e1:8b:f3:b3:21:09:7a:ef:79:28:77:5c:94:86:28:
d8:53:7e:81:b2:47:c1:f0:b4:52:b1:d2:d0:7c:6e:
7d:13:ea:c9:38:ab:63:37:ad:03:3f:c0:22:a8:d0:
46:56:61:f7:04:a4:20:ce:c1:e5:8b:5e:78:1f:f0:
f4:6e:e9:02:e6:dd:e2:70:26:31:a7:db:b4:d3:01:
82:2b:8b:93:7f:a5:03:a2:fe:03:94:0e:7b:15:5e:
59:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.156.0/22
178.255.56.0/21
185.41.224.0/22
IPv6:
2a01:5de0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51409
Signature Algorithm: sha256WithRSAEncryption
0e:5b:94:22:0b:76:f7:96:6a:d7:4c:64:8c:3d:53:be:76:61:
77:c2:c0:bb:0c:e7:c6:62:7f:01:16:8d:c3:c9:37:8b:1c:d1:
93:b9:ad:e2:80:ba:24:c5:18:06:2a:44:c8:ba:c6:4c:11:bf:
9e:63:eb:07:22:4b:34:18:60:67:71:02:83:fe:43:33:34:1d:
a9:fd:d0:1a:a9:b5:2e:90:c1:96:fe:a2:f6:c6:84:cb:24:4a:
ed:ab:f9:24:28:31:1d:cf:96:77:1a:df:60:d7:92:6c:c2:45:
4a:b2:f3:42:17:29:80:31:b8:14:b0:5d:ed:28:e8:9f:cf:2e:
60:52:57:5c:89:7c:1c:28:31:c9:af:50:2e:df:b7:0a:03:96:
b2:fb:11:00:ae:61:21:b0:33:77:3b:db:41:04:d2:9a:5b:1b:
9b:be:7b:e4:22:0a:f8:02:94:99:7e:63:4a:6a:18:48:7b:a5:
de:01:14:dd:a8:9e:fc:bd:a8:5b:12:84:e4:ca:5f:36:0a:0e:
3e:de:9a:20:f3:77:4e:34:25:0b:1a:82:7f:3f:99:75:ab:07:
a5:f3:ae:be:9f:79:b6:8f:d7:0c:4e:6e:fc:2d:9e:13:bd:5a:
60:0a:54:e1:32:f5:07:2c:8a:df:6c:c1:18:3c:04:c5:fa:d5:
ba:6f:26:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:44 2025 by rpki-client