Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bZYBl_5YkhTCJZ9q6olsThAH6YY.cer
File: bZYBl_5YkhTCJZ9q6olsThAH6YY.cer (raw, json)
Hash identifier: +Zu8wlG2kHBdwhP7P7co8fYOtmTyTasC78C0AKp+6gg=
Subject key identifier: 6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB28A08BA2FDEC3BAA656224502E37
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60300
IP: 185.1.200.0/24
IP: 185.179.108.0/22
IP: 2001:7f8:10c::/48
IP: 2a00:4d60::/32
IP: 2a00:71e0::/32
IP: 2a02:48::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:28:a0:8b:a2:fd:ec:3b:aa:65:62:24:50:2e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d960197fe589214c2259f6aea896c4e1007e986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:3b:26:09:62:65:ed:19:9f:d1:ab:95:27:
5e:78:ed:08:ca:0a:25:4f:23:8e:21:6f:02:2f:53:
63:c2:41:42:cf:f0:df:51:de:bd:58:a1:49:d3:bb:
e3:b4:d6:a3:c8:fc:21:35:3b:d4:85:c7:8c:99:aa:
f7:05:25:8c:ab:ce:bc:37:bc:22:14:55:da:6b:e2:
bf:9e:61:9e:73:7f:3a:95:da:fa:02:0e:da:b8:08:
36:90:2b:7d:07:d9:e2:32:43:a7:7f:3e:d7:7a:ac:
bd:44:07:2d:39:32:43:c8:b5:b1:48:24:0f:45:46:
36:30:97:b8:a6:66:b7:7c:46:02:ed:01:fd:1f:29:
58:68:6b:41:d3:05:0d:dc:d4:66:be:d1:ae:89:15:
b0:a4:54:bc:07:eb:a9:f6:b6:52:d1:a0:3d:a3:22:
9b:fd:6b:bd:8f:6c:71:a8:45:d9:2a:1c:fb:7d:c8:
1f:35:79:f2:e3:97:1d:6f:6b:2a:ef:7e:6c:07:d0:
c4:5e:db:64:8e:95:d5:84:48:9a:bd:44:5f:f2:4f:
91:54:67:f1:73:7b:c0:ac:11:e0:60:d7:69:3c:74:
eb:5c:4c:78:14:64:ef:a2:04:1b:80:da:0d:56:4a:
0a:2b:7b:83:b3:2f:9f:e1:39:2e:b2:c8:6f:dc:d8:
ae:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:96:01:97:FE:58:92:14:C2:25:9F:6A:EA:89:6C:4E:10:07:E9:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/879c02-dbf4-4e40-a4ed-313754e64e13/1/bZYBl_5YkhTCJZ9q6olsThAH6YY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.200.0/24
185.179.108.0/22
IPv6:
2001:7f8:10c::/48
2a00:4d60::/32
2a00:71e0::/32
2a02:48::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60300
Signature Algorithm: sha256WithRSAEncryption
a8:e7:1f:90:42:04:99:fa:52:33:ac:b0:2a:89:ec:d6:c4:e6:
e5:b5:cf:8d:d6:ba:44:be:59:b3:dc:f9:e5:28:b6:ce:df:b4:
cc:e1:17:ec:7a:24:fd:cd:b1:04:ec:e0:a2:c2:5f:7c:95:9c:
35:18:72:71:d3:bf:43:ba:85:05:f4:4a:bf:00:aa:44:51:f2:
ac:f7:5e:de:eb:05:fc:e4:62:70:90:38:4e:08:f3:78:b0:08:
79:e4:f1:f9:82:fd:ba:5f:af:95:42:87:b4:7d:c8:7c:4b:3c:
51:3f:20:7d:33:55:e1:d9:0f:5b:d1:d3:37:ff:8d:da:5e:42:
67:fc:93:60:ed:6f:95:03:f2:00:ae:04:72:43:98:57:c1:69:
61:4b:b5:0f:a9:fd:1d:a5:ee:07:86:8a:e4:2b:ec:3d:bb:9c:
26:be:3e:4a:a5:92:9c:3b:34:c2:c3:a5:bc:80:e5:16:a4:75:
ee:32:52:c9:92:21:5b:17:d4:71:2e:6a:1a:e0:69:32:d8:65:
75:0f:3f:20:be:07:c7:76:48:8a:49:6d:a9:a6:13:f7:4f:ba:
c3:a1:4c:b5:34:eb:4a:86:52:22:5f:f8:a8:e5:9a:fc:10:6b:
5a:48:7c:ff:4a:c0:ed:1a:53:40:24:25:f2:df:c3:56:07:90:
56:a8:30:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:52 2025 by rpki-client