Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dXFLWBraGW41UcCM52JDvgWLROs.cer
File: dXFLWBraGW41UcCM52JDvgWLROs.cer (raw, json)
Hash identifier: qUFrHb0htXRLSFvO8QDk9wusY93OTvrKopOaWpwNHkE=
Subject key identifier: 75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194BB719DFCEBF1B2571C3208B965F116A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 31 Jan 2025 08:19:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48117
AS: 57699
IP: 46.151.248.0/21
IP: 91.209.24.0/24
IP: 193.106.24.0/22
IP: 194.146.136.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:71:9d:fc:eb:f1:b2:57:1c:32:08:b9:65:f1:16:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 31 08:19:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75714b581ada196e3551c08ce76243be058b44eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:a7:7e:03:b5:e7:4e:8b:83:c7:b0:68:70:dd:
78:1c:d0:10:b3:0e:f5:cc:9a:3f:7b:b5:33:f0:26:
d8:1b:35:cb:ad:59:78:5b:42:2c:b0:69:db:ba:4c:
e3:a3:b3:c7:cb:8c:d3:9f:cf:46:2e:b2:e8:3d:6d:
76:9b:87:81:52:ff:5f:52:c9:52:ff:50:ac:37:23:
8f:bb:2e:4f:b4:0f:c2:b4:db:ff:a5:0d:ec:c3:dd:
b1:ff:6d:23:39:3b:cd:1b:a8:ca:fc:a1:13:8a:4f:
e1:29:1c:85:7b:af:34:dd:08:46:2e:44:ad:d9:74:
b5:0d:01:4b:df:45:06:b1:84:65:4d:36:39:4b:f3:
8b:dd:23:f0:1c:2e:2d:38:82:a4:08:09:57:54:ae:
19:7a:32:8d:68:fe:61:14:6e:26:cd:fa:2d:29:0e:
f7:1c:78:49:a4:64:be:11:68:01:fe:a1:56:4f:dd:
a2:a0:93:63:07:f7:85:2e:96:12:17:87:ae:d1:77:
d1:d9:8d:cd:5c:a1:19:0f:2e:e0:e9:ed:17:6d:a6:
a1:ab:50:b9:e6:c4:de:e9:f8:b8:56:73:a2:10:72:
d6:a1:13:e4:cc:03:db:37:45:ed:b1:0e:57:4d:b8:
cf:60:a1:e7:9d:3a:10:0a:c7:59:1c:58:d0:6a:cf:
fb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:71:4B:58:1A:DA:19:6E:35:51:C0:8C:E7:62:43:BE:05:8B:44:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/39d226-72bf-490e-9f16-073fbbe111e5/1/dXFLWBraGW41UcCM52JDvgWLROs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.248.0/21
91.209.24.0/24
193.106.24.0/22
194.146.136.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48117
57699
Signature Algorithm: sha256WithRSAEncryption
29:fd:c3:7d:ac:8f:fc:54:86:1c:ef:76:24:1e:f5:2f:33:d4:
f7:a0:64:df:9d:ee:13:05:ff:fa:4d:05:b8:c1:1a:50:f5:a3:
4d:79:e6:2d:b3:21:c1:86:08:4d:68:ec:b1:1e:66:24:46:f9:
9b:1e:90:a0:2a:9e:ce:f7:f2:f9:0a:10:69:c7:7f:cb:28:95:
f7:3f:0f:3f:39:26:cc:15:ad:d2:f5:52:ad:dc:f8:a9:69:38:
d7:f9:eb:7b:52:16:11:ca:44:bd:15:fc:9d:e2:18:1c:95:c9:
5a:41:e3:9e:e0:c2:47:49:6f:72:28:63:66:54:dd:85:24:49:
86:d4:8f:66:f2:95:59:75:c0:68:d5:36:09:1b:5c:12:4c:5d:
94:b4:5f:fd:24:1e:e0:41:c9:8c:d9:49:6b:2e:0d:b7:cf:e9:
90:66:34:4b:05:1b:63:02:1e:97:17:60:81:d1:9d:90:47:87:
7f:c4:55:36:f2:d6:2e:27:db:96:d5:ff:b9:e6:16:75:e9:a6:
a8:eb:23:4a:51:a1:e4:f3:4e:de:44:d3:e1:1c:67:bf:b2:5a:
2f:6d:40:b2:83:f3:de:73:e1:2c:01:c7:d9:86:57:19:f9:29:
22:34:26:9e:21:48:21:a8:22:27:76:d4:54:6e:88:35:39:26:
39:6f:db:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:37 2025 by rpki-client