Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/alf_6CKzunvBlNt6c0yF787y8oM.cer
File: alf_6CKzunvBlNt6c0yF787y8oM.cer (raw, json)
Hash identifier: cQ/nYgQZcK4+SJJIfkER9Yc5C9N9QB2eN7bZd0JwmfU=
Subject key identifier: 6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423699F3C1A735C8F5F80C550128DFD06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20701
AS: 25192
AS: 200070
IP: 5.187.34.0/24
IP: 185.43.132.0/22
IP: 193.17.47.0/24
IP: 193.29.206.0/24
IP: 194.0.12.0 -- 194.0.14.255
IP: 212.237.229.0/24
IP: 217.31.192.0/20
IP: 2001:678:1::/48
IP: 2001:678:f:: -- 2001:678:11:ffff:ffff:ffff:ffff:ffff
IP: 2001:1488::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9f:3c:1a:73:5c:8f:5f:80:c5:50:12:8d:fd:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a57ffe822b3ba7bc194db7a734c85efcef2f283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:bc:47:dc:83:5c:aa:bf:a1:2d:d8:70:61:
16:04:ce:24:95:bb:7b:91:17:c5:74:f8:d4:a0:1a:
b1:aa:f4:0c:20:8c:9a:26:95:ea:ec:44:56:2a:9c:
b5:b3:9c:6e:fb:90:0f:6c:4d:c4:7c:93:88:0c:48:
23:b1:e2:34:75:7c:39:a2:d9:fa:61:92:66:7e:1a:
3c:58:67:05:7a:54:98:39:94:38:37:b0:e0:9e:a5:
53:d6:14:dd:a1:14:43:be:16:be:27:3c:d7:48:6d:
ba:a0:3e:f0:d6:cc:4b:b1:41:85:ca:76:93:f4:0b:
9b:31:77:64:88:2d:76:b3:67:c5:09:ae:ba:7f:e4:
0c:e0:5e:80:c5:77:6a:48:98:5f:00:41:32:07:d8:
f9:bb:4e:be:00:a5:5b:8d:66:ae:8e:dd:06:96:3b:
25:a8:e6:d7:23:bb:22:93:46:df:6c:3b:1a:30:51:
98:ea:01:ec:10:f0:86:51:b7:91:28:d9:aa:5e:4d:
56:3e:88:a7:ac:b9:26:02:45:12:b2:60:03:78:4d:
41:b8:d6:cf:9b:89:c3:d6:ea:b9:a3:2b:40:72:57:
1d:e5:52:ff:6f:2e:f2:5a:ea:ff:d2:f6:1b:23:12:
04:75:1d:e4:1f:3a:9f:e4:7a:fa:20:a3:3d:f7:a5:
40:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:57:FF:E8:22:B3:BA:7B:C1:94:DB:7A:73:4C:85:EF:CE:F2:F2:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/afef12-1f08-4b46-947b-ca0c62621098/1/alf_6CKzunvBlNt6c0yF787y8oM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.187.34.0/24
185.43.132.0/22
193.17.47.0/24
193.29.206.0/24
194.0.12.0-194.0.14.255
212.237.229.0/24
217.31.192.0/20
IPv6:
2001:678:1::/48
2001:678:f::-2001:678:11:ffff:ffff:ffff:ffff:ffff
2001:1488::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20701
25192
200070
Signature Algorithm: sha256WithRSAEncryption
4f:c8:80:25:6c:18:21:7a:28:37:ab:52:ed:b2:47:78:59:77:
e2:3d:81:fa:02:71:bb:d2:30:d9:11:55:52:53:37:f3:7d:1b:
9a:4c:e0:37:41:01:81:9f:ad:0e:2c:cc:72:21:c5:8f:b6:63:
9e:df:98:fc:f7:8d:ea:0c:e7:dc:72:d4:51:ff:3d:50:12:e6:
bd:98:27:6d:db:07:be:95:e1:a9:0d:50:4c:d4:48:a5:9d:ab:
ba:42:f1:9c:11:02:50:46:d6:07:de:35:0c:35:34:dd:41:bb:
cd:51:01:d7:8d:2d:8f:eb:c3:50:92:75:68:cb:62:93:8b:c0:
59:43:9f:8c:ee:e1:7f:54:b6:b5:bd:83:25:d3:27:96:40:e8:
5b:e4:4f:07:2c:5c:26:ed:b4:37:61:39:4c:11:8b:ff:3f:52:
ac:42:e6:bc:ba:6a:e5:bf:43:63:87:ac:40:e5:ef:12:0a:fc:
56:37:a6:de:46:c8:89:7f:81:74:1a:05:07:83:6c:5c:38:54:
be:eb:65:98:19:19:73:12:72:ed:95:b8:37:be:99:3f:8e:b1:
e0:60:94:31:1b:2e:dd:b2:d6:ec:2b:ba:92:02:ac:bd:4f:47:
c7:1e:ab:08:02:ce:c8:49:80:d9:a4:12:68:f4:61:bf:f0:6d:
6f:9e:36:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:48:07 2025 by rpki-client