Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer
File: ckKhNxX8VXjNwFqqpoxqQTzbyfU.cer (raw, json)
Hash identifier: MMbhIlVaaIMysKuZEbHDaIlTgJFssBygPBEOiD548WE=
Subject key identifier: 72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747E3DDE061E53345BFBA850FDC711C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47568
IP: 94.100.32.0/23
IP: 94.100.36.0/23
IP: 185.122.24.0/22
IP: 2a0d:c280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e3:dd:e0:61:e5:33:45:bf:ba:85:0f:dc:71:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7242a13715fc5578cdc05aaaa68c6a413cdbc9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:17:43:85:d4:d6:ff:56:be:f3:8f:5b:92:b0:
26:de:0f:9d:5e:4c:03:4f:58:9f:52:73:11:b1:32:
62:11:60:7c:b0:20:f6:ad:51:3f:b0:09:47:53:73:
26:71:8f:36:36:d1:3f:14:87:bf:f2:0d:79:ca:67:
52:32:40:c0:ed:a8:96:58:d9:22:19:ab:5a:f4:c7:
df:08:ee:52:ae:fa:f2:7d:de:a9:3a:ef:95:c2:a4:
2c:3b:42:95:0f:bb:c5:77:21:63:4a:16:46:ff:e4:
b1:20:d1:4c:27:6c:c0:ce:b9:f1:cf:95:93:63:42:
4c:63:64:08:ec:24:0a:9e:43:f6:b6:7d:1f:99:4d:
9c:76:32:4d:4c:0d:bb:c6:63:64:97:ca:1d:10:a2:
c6:30:1e:0e:bd:b7:71:6c:b5:50:f7:ff:c3:6f:46:
24:07:a7:2d:7a:4c:b3:af:44:65:f2:a6:5d:49:88:
14:cf:c5:df:a0:ac:06:03:d7:7c:6a:90:9d:f2:cd:
62:d5:2f:80:a1:c5:0b:5b:8c:0b:20:9b:54:c6:4a:
67:d0:6d:67:81:e5:25:77:77:01:dd:c6:42:14:fc:
a0:83:36:9d:4b:ef:d1:1f:48:04:54:36:84:cd:20:
62:40:70:64:a0:28:fa:c0:f7:12:1f:dc:df:26:6e:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:42:A1:37:15:FC:55:78:CD:C0:5A:AA:A6:8C:6A:41:3C:DB:C9:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/90aa1e-0098-4fda-9829-a15ccf5b413e/1/ckKhNxX8VXjNwFqqpoxqQTzbyfU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.32.0/23
94.100.36.0/23
185.122.24.0/22
IPv6:
2a0d:c280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47568
Signature Algorithm: sha256WithRSAEncryption
b0:96:3f:5b:95:93:88:b5:3e:7a:0e:dd:5b:e0:34:93:84:f4:
f5:f3:f3:26:76:f1:a0:68:f6:6c:a9:15:63:17:b6:63:4d:c2:
e0:39:28:3a:e7:c0:83:60:5c:49:50:f2:a0:aa:86:ae:ef:ad:
88:ce:ba:30:d0:da:63:9a:77:ac:7e:1f:db:c7:be:74:8b:ac:
8f:6c:a2:e8:ca:0d:a3:70:a4:c7:0d:cc:0b:38:e1:c2:12:14:
74:82:ca:53:be:d8:01:c4:39:04:98:72:97:b0:b8:b1:a9:85:
fa:62:73:c0:a1:b6:95:ac:13:82:d6:05:2e:aa:61:86:00:9b:
69:e0:63:d0:e9:ec:f6:a6:27:3b:ae:51:8c:4d:20:b3:3a:f1:
b8:11:39:07:27:be:b6:55:f6:d1:55:80:94:04:c7:ab:14:bb:
4c:f2:38:96:8e:d5:4b:e0:00:ba:4f:5d:56:5e:f5:a0:81:80:
e6:6a:4b:ed:7d:ec:0b:88:5a:9a:5d:fa:3a:36:43:bd:e5:8b:
95:ab:5d:74:c4:9b:e0:97:ef:fd:02:d0:5e:68:68:0b:8a:45:
1a:bf:4e:5c:3c:b8:dd:90:a4:7b:96:78:9d:f3:97:29:bb:10:
dd:29:6c:ff:72:1e:5a:c3:d4:6e:0d:d9:07:b0:62:1e:7d:7d:
18:17:1a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:47:21 2025 by rpki-client