Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bM-ITPeOxTGYbkbt4C_GiGGWU4E.cer
File: bM-ITPeOxTGYbkbt4C_GiGGWU4E.cer (raw, json)
Hash identifier: Nqg7/rXR4WLirKzTur5tyg7+M59puG+txqeYIhornkU=
Subject key identifier: 6C:CF:88:4C:F7:8E:C5:31:98:6E:46:ED:E0:2F:C6:88:61:96:53:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521E8D475F1140E1165AB90AA07F722
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/bM-ITPeOxTGYbkbt4C_GiGGWU4E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207871
IP: 2001:678:b7c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:e8:d4:75:f1:14:0e:11:65:ab:90:aa:07:f7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ccf884cf78ec531986e46ede02fc68861965381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:55:69:b6:1c:5a:8d:d9:03:8e:bf:7f:d3:
7f:8f:9d:f4:65:67:76:e9:3f:1c:ab:fb:5b:9f:d5:
ce:83:88:4a:0b:92:b4:c3:04:c3:3f:31:a1:90:87:
bd:e4:2d:30:91:0f:b9:1b:a9:56:ba:65:ea:f3:ef:
01:aa:f8:f0:b5:26:be:5f:38:fe:ab:c7:1e:47:ec:
59:9c:59:65:07:18:ec:e5:e1:97:4c:bf:57:a7:5e:
4f:fc:d0:f6:dc:04:77:a2:b4:4c:62:55:0f:b2:d7:
9f:47:77:fe:61:92:f1:c9:2f:6f:01:67:e9:c5:1f:
76:f4:bc:e0:54:1e:2a:f1:23:e5:68:81:b7:0c:ff:
76:c0:89:bd:eb:30:5a:2a:54:4d:d1:a8:c9:f7:f4:
32:58:e1:a2:e8:f4:26:b5:14:71:88:1d:c1:89:dd:
e9:50:89:71:e7:36:ba:bc:ac:fd:dc:a1:46:d4:0c:
71:fb:80:b5:ad:f6:b0:28:f4:a1:ac:3b:b7:d6:cd:
e4:b7:9c:6b:7a:16:6c:d0:16:b1:d8:32:7d:42:d1:
d9:1e:23:3d:0c:a7:3b:cc:47:68:05:8f:0c:82:2a:
0b:55:d4:24:72:2a:b7:55:d8:b4:ec:e0:a6:2f:13:
ba:98:9f:b2:ab:21:ea:72:6d:5a:b9:96:9d:0a:dd:
e7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CF:88:4C:F7:8E:C5:31:98:6E:46:ED:E0:2F:C6:88:61:96:53:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8af211-cf7b-4191-8e24-f41b18ee9c01/1/bM-ITPeOxTGYbkbt4C_GiGGWU4E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:b7c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207871
Signature Algorithm: sha256WithRSAEncryption
6d:2b:b1:8c:41:84:d5:d4:38:76:58:23:e0:03:db:c6:67:35:
08:fd:91:b8:bf:cf:76:37:d8:a4:f2:33:7a:6a:63:f5:43:bb:
c6:8a:79:b3:8d:5e:fc:ce:f5:47:77:9d:7d:be:fc:71:d9:54:
79:7f:80:d2:48:a0:27:b9:37:62:a7:8b:fd:84:bd:b8:8c:db:
b5:71:64:fa:a6:86:e5:0a:86:d8:29:ea:66:a3:f1:d2:4b:f6:
0d:19:f6:51:aa:ea:de:20:8f:f7:23:5d:e8:47:c5:24:d1:51:
f4:83:79:e5:5b:4a:c8:4f:f8:b7:5c:0f:cb:8b:24:9a:05:e2:
dd:31:96:cf:de:6e:57:b1:eb:85:40:74:33:57:4c:64:0a:51:
3a:63:04:cb:36:f1:69:3d:7a:cd:1a:5d:50:8b:1d:ae:93:25:
4c:9e:98:c3:9f:33:59:18:ab:66:0c:be:5b:43:d4:5a:bc:69:
d4:ba:0c:1e:c9:ce:9c:2d:2a:85:d2:d0:5c:ce:f8:86:f7:18:
c5:b7:76:4f:bb:61:71:d6:08:8d:b1:a5:1e:5a:e4:fe:cd:02:
5f:e3:f6:7a:53:91:b4:10:59:df:14:54:0a:45:90:a3:d2:f2:
e7:36:78:21:2a:a2:0f:88:59:82:c5:65:1b:33:3e:e8:d7:21:
7c:d2:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:18:07 2025 by rpki-client