Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b_xyU8DaFbVuAJVzGhDCu61sEX4.cer
File: b_xyU8DaFbVuAJVzGhDCu61sEX4.cer (raw, json)
Hash identifier: XfoSX0/4q3OJ09SYarGM3VRgDteHn6TNtmj4MENOCls=
Subject key identifier: 6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BB619836F9945236A2857F7E80095
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47752
IP: 91.204.236.0/22
IP: 178.216.128.0/21
IP: 2001:678:c3c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b6:19:83:6f:99:45:23:6a:28:57:f7:e8:00:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ffc7253c0da15b56e0095731a10c2bbad6c117e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:87:fb:af:45:c1:03:44:b1:ce:58:69:13:52:
e0:6d:85:e8:bc:44:ef:84:f3:7b:26:07:a5:08:5c:
e6:d7:ee:16:d1:d5:14:d4:80:8c:42:fd:44:1c:a2:
d6:8e:16:df:86:55:a4:33:a7:e4:08:eb:0a:8c:fb:
88:c1:db:c3:2d:b2:7c:ce:fe:0a:99:51:bb:5a:e9:
96:cf:a7:a5:8a:87:cf:ae:68:0d:fd:d3:fb:4e:c7:
8f:4f:21:ec:6e:34:96:cf:1e:af:b2:41:6e:92:1a:
6f:9f:a2:e7:30:9b:61:36:97:9c:7a:ff:5b:73:2d:
21:dc:ba:1e:84:b1:31:f3:66:40:5b:2b:e4:59:97:
94:51:98:76:e7:95:c2:4c:c5:5a:95:4e:73:9b:c8:
03:c3:a4:e5:33:98:9e:0a:ac:9e:49:7b:6e:85:fd:
7c:68:33:93:f1:9e:85:fa:42:d9:d7:77:1d:4e:b7:
1e:48:ea:a6:bf:37:22:6e:41:5c:4d:72:7a:be:e4:
e5:39:64:a3:21:ba:90:16:ec:ec:24:9e:ad:bd:e8:
6a:69:b2:4a:57:7f:65:b8:fa:35:d3:be:95:47:1e:
e0:18:6f:61:cf:db:78:25:3c:7a:08:c7:1b:2a:ce:
45:9d:fb:2d:5c:0b:67:5c:ef:28:fe:b5:ab:1b:b6:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FC:72:53:C0:DA:15:B5:6E:00:95:73:1A:10:C2:BB:AD:6C:11:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dee72d-d91d-465e-9d57-37a7cd37d49e/1/b_xyU8DaFbVuAJVzGhDCu61sEX4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.236.0/22
178.216.128.0/21
IPv6:
2001:678:c3c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47752
Signature Algorithm: sha256WithRSAEncryption
35:04:e8:a6:ea:57:11:5d:3c:56:d0:bf:b8:b4:bf:68:14:04:
ff:c1:ec:e1:56:f6:f3:af:64:80:9c:b1:98:41:fe:9b:5d:4a:
31:c0:ce:79:d4:da:bf:ab:c3:23:8b:dc:06:a6:19:5b:68:cc:
04:24:3b:c4:40:75:f7:11:45:75:fd:55:f2:2c:bd:6e:8f:75:
3c:d9:fd:66:ec:5d:01:65:39:74:e3:44:da:c0:b2:5f:67:1a:
54:91:a2:12:ff:f1:16:ee:b7:51:06:d1:51:be:08:49:02:d5:
ca:e8:71:a8:df:35:31:77:e8:0d:19:d8:6e:7a:3a:bf:ce:e7:
fc:24:e9:af:05:9f:fd:12:82:7c:ae:e0:35:b4:2e:ea:b5:b7:
f1:fd:6f:3e:54:63:4a:6b:e3:1c:ed:90:76:a9:76:94:67:00:
3d:8b:e9:35:8f:f1:01:07:71:c1:3f:85:ac:11:19:94:75:a0:
9a:52:47:7e:e3:58:24:0d:b8:17:e3:d2:3f:82:60:3e:b2:65:
9b:5e:93:e8:65:cf:98:8d:a0:67:ba:28:75:bb:e5:58:ae:28:
0e:46:1f:7d:fb:9e:e2:d2:f1:bf:f8:e1:30:2a:38:ce:17:2a:
45:55:14:c9:37:7d:e5:49:5f:72:47:99:2e:af:cb:7a:6f:c9:
f0:51:89:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:54:28 2025 by rpki-client