Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cpIiZWfact2GiDyt1fPeb_1bNXM.cer
File: cpIiZWfact2GiDyt1fPeb_1bNXM.cer (raw, json)
Hash identifier: sXQkPYGjaAoOrr7VcPLGiGATapX8tnz+G9CX2y2xZ/c=
Subject key identifier: 72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F181D595F146B24978225E326BDC8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215385
IP: 45.117.232.0/22
IP: 176.119.217.0/24
IP: 2a07:9340::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:18:1d:59:5f:14:6b:24:97:82:25:e3:26:bd:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7292226567da72dd86883cadd5f3de6ffd5b3573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:23:b4:74:1b:54:1d:bd:a3:80:25:a3:9d:97:
b7:ce:56:2f:46:40:a3:e1:30:b2:51:6a:ed:22:5e:
7d:91:1f:f5:a8:c3:75:c3:ec:8c:ad:54:5e:c5:6c:
03:4f:5f:13:42:74:a1:c1:10:bb:c6:42:81:0f:ee:
fb:bc:8a:12:4d:c5:5f:59:ba:3c:40:fd:54:75:b9:
e6:e6:56:53:6f:06:cd:75:c8:5c:e9:91:5d:2c:3f:
0e:3a:60:68:5e:40:d5:6f:75:92:41:c5:6c:88:bb:
78:e7:fc:ca:0d:c9:cb:26:7f:4f:cd:cd:d7:76:d9:
3d:1d:79:54:45:23:4d:c3:6e:c8:db:9c:49:26:b7:
4a:68:3e:f4:e6:7f:70:3b:c7:61:10:fa:af:27:f0:
3a:a1:63:d9:bb:4f:28:1d:97:a5:f5:ab:59:29:5c:
33:8b:45:6c:3b:06:4d:eb:60:6c:66:e1:ec:d7:99:
2b:9e:c5:a3:08:a4:ec:b3:85:8f:e2:93:80:f7:38:
32:fa:cd:e1:10:1c:96:cf:f5:85:21:aa:e1:23:5c:
1c:3e:1a:12:fb:11:26:db:77:55:88:b3:a8:9c:49:
2a:27:18:e4:48:53:ed:0a:26:33:f9:66:bd:ab:d4:
1b:17:cf:0f:39:64:78:90:8a:dc:46:00:ad:a6:66:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:92:22:65:67:DA:72:DD:86:88:3C:AD:D5:F3:DE:6F:FD:5B:35:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4ec217-e8d7-4e80-87cd-039de784d941/1/cpIiZWfact2GiDyt1fPeb_1bNXM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.117.232.0/22
176.119.217.0/24
IPv6:
2a07:9340::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215385
Signature Algorithm: sha256WithRSAEncryption
60:75:c6:70:58:71:99:a5:8b:3d:25:52:71:ba:bd:ef:31:4d:
0a:53:00:71:e6:2f:08:30:c4:c1:6e:81:17:2b:d5:ed:f9:40:
6f:54:5d:78:f0:bb:a3:e0:e8:11:40:11:f7:56:45:17:68:e2:
04:27:ce:75:db:19:bf:2b:60:9e:a1:4d:4b:e3:3b:7c:c9:99:
55:b0:63:ad:8d:83:dd:d2:5c:30:e7:dd:97:d0:28:8a:4d:0e:
79:d4:c1:b0:06:39:b0:4b:51:98:0e:d9:ba:9e:08:24:19:96:
ee:50:75:dc:8b:eb:cb:9f:84:02:1f:f5:6a:12:68:fa:dd:a5:
f8:c9:29:d1:86:11:9f:57:0c:d4:b8:ab:20:e6:43:71:83:74:
f9:c8:3b:f6:59:72:14:81:3e:24:18:b7:4a:64:33:9d:ab:88:
14:d3:3b:31:9c:ea:dd:4f:15:e6:da:27:04:ae:62:8f:5d:c2:
d9:60:a2:e2:e8:ce:b1:04:de:c7:e3:28:61:86:89:dd:e2:d3:
f5:03:6d:61:ac:4c:d3:92:80:68:52:3b:e5:c7:cc:14:bc:10:
e8:6e:db:8b:8c:d3:6a:5a:b0:bb:b9:d7:6f:32:3e:b0:a4:43:
2d:3b:bc:84:e1:dd:47:26:79:75:66:4d:b5:80:37:b5:a0:8a:
cb:96:88:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:02:54 2025 by rpki-client