Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_utSjKSLH0R1gsVMz27XgHUbUdU.cer
File: _utSjKSLH0R1gsVMz27XgHUbUdU.cer (raw, json)
Hash identifier: sNF/ePdWae7MyDwXIo1F6ilqox/9jyy8i6mwQt2uSyE=
Subject key identifier: FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C4A80FBDA2C5B0D23A6DFB1E3A80D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215708
IP: 95.128.194.0/24
IP: 2a14:7f80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4a:80:fb:da:2c:5b:0d:23:a6:df:b1:e3:a8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=feeb528ca48b1f447582c54ccf6ed780751b51d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f8:c0:90:85:4a:a4:55:87:de:6d:0e:aa:83:
18:9d:2f:e5:64:d3:8f:eb:d7:50:5d:30:8b:f4:39:
0a:34:97:b1:bd:31:99:36:af:93:80:4e:6d:06:49:
41:32:48:c7:9e:9f:1d:88:87:8c:2a:8b:cb:60:c4:
50:27:1f:6a:1c:b8:df:40:bb:ec:79:ff:f9:5a:96:
0d:57:be:3d:4e:26:0b:59:8d:5b:44:a9:02:c3:28:
b8:f6:3e:0c:11:60:2a:88:e3:e1:b6:f4:5a:81:33:
fb:2d:c8:82:ce:fa:88:d1:72:4b:86:58:ec:46:5c:
6d:a4:00:3d:73:29:f1:34:00:cc:f0:92:c4:0e:d9:
5e:ec:df:1d:ee:ad:32:fb:00:a2:47:9f:d6:f5:ea:
38:fb:4b:8d:21:74:c4:ae:41:aa:04:e0:68:54:c0:
e1:a8:c6:17:1c:5f:91:ec:73:33:65:c0:8f:23:8c:
a3:98:2d:4c:73:60:33:e6:46:d4:bc:7a:65:3d:16:
7d:9c:6a:86:18:54:20:a4:56:84:2a:92:44:91:44:
c6:27:aa:cf:31:c3:8e:fd:08:c3:3a:15:06:72:79:
5c:68:dd:59:5e:3b:e5:a2:dc:a8:fc:fa:6f:8e:b6:
05:81:2f:46:e3:2c:d7:60:52:d5:17:e6:ad:ca:bc:
6c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EB:52:8C:A4:8B:1F:44:75:82:C5:4C:CF:6E:D7:80:75:1B:51:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c5f9d5-7f4a-4e2f-ba4e-738886fd4edd/1/_utSjKSLH0R1gsVMz27XgHUbUdU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.194.0/24
IPv6:
2a14:7f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215708
Signature Algorithm: sha256WithRSAEncryption
a6:4a:a6:80:b9:14:65:f5:13:34:39:0c:0d:b2:62:27:75:b6:
f5:c4:08:bb:64:d2:94:10:a3:4b:0e:d4:d3:0c:7a:b9:8c:24:
61:6a:9d:90:8f:1f:ad:6c:fa:0d:5a:c7:8e:85:27:47:ce:cf:
23:7f:8d:61:2f:5a:08:1a:6e:b9:17:73:d6:96:5c:0b:f2:e9:
e3:23:ff:3e:53:f5:67:66:d3:89:a1:8f:26:5c:e1:e4:8a:b7:
be:ab:4e:24:e0:3b:d1:73:1c:d8:f8:3f:42:c3:69:88:be:ec:
fa:af:26:44:65:23:f2:4c:0c:ac:2a:71:76:a8:56:a0:da:01:
0c:06:d4:5c:ee:0d:0b:40:6d:16:a6:f4:75:40:84:89:fd:3b:
89:0d:6e:8f:a2:f5:06:0c:1f:52:56:45:f3:e2:d2:8f:71:d9:
3e:f1:ba:6d:be:f9:5a:64:b4:14:7f:f6:ab:c8:ab:e4:56:ef:
3d:40:8f:51:43:be:32:e7:3b:83:cd:92:3e:91:10:de:7b:41:
4f:ab:2c:ae:01:af:bb:65:5a:74:3d:fd:6a:42:6e:c7:39:ed:
db:65:31:5a:f8:75:7d:05:12:37:74:bf:07:a9:54:8b:b4:3f:
56:d3:70:e2:4e:06:d6:9c:6e:47:cb:9b:98:7b:3a:bb:9d:a3:
24:a3:90:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:16:10 2025 by rpki-client