Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer
File: eNo_c5yggv_oh_cDBuf8dIRgbOI.cer (raw, json)
Hash identifier: 67T6rjSQg+7AFG/OR0+Nc+hksP3cP3j8UpJtrRs0ac4=
Subject key identifier: 78:DA:3F:73:9C:A0:82:FF:E8:87:F7:03:06:E7:FC:74:84:60:6C:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B2143707FFA6A5B8F2AB548E1F7107
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15879
IP: 5.226.40.0/21
IP: 46.255.104.0/21
IP: 77.245.80.0/20
IP: 80.246.176.0/20
IP: 81.24.48.0/20
IP: 82.201.0.0/17
IP: 83.219.64.0/19
IP: 87.250.128.0/19
IP: 93.188.248.0/21
IP: 94.247.192.0/21
IP: 185.28.148.0/22
IP: 185.55.128.0/22
IP: 193.91.48.0/20
IP: 193.189.134.0/24
IP: 194.105.138.0/23
IP: 212.204.192.0/18
IP: 213.130.160.0/19
IP: 213.133.32.0/19
IP: 213.197.192.0/18
IP: 213.206.64.0/18
IP: 217.115.192.0/20
IP: 217.148.80.0/20
IP: 217.149.64.0/20
IP: 217.194.96.0/19
IP: 2001:67c:1a4::/48
IP: 2001:898::/29
IP: 2001:9a0::/32
IP: 2001:14a0::/32
IP: 2001:40e0::/32
IP: 2a02:f18::/32
IP: 2a02:f30::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:14:37:07:ff:a6:a5:b8:f2:ab:54:8e:1f:71:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78da3f739ca082ffe887f70306e7fc7484606ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:60:3a:3a:8e:da:0d:0b:5a:04:ea:be:67:
af:22:ba:76:8e:87:7f:7a:f6:70:6f:58:c2:80:43:
2f:ce:a9:18:ea:38:34:f6:53:40:a3:7d:54:24:7d:
9e:54:64:5e:b5:70:a9:f0:11:82:dc:c7:08:00:2d:
4c:fb:19:b3:0e:1f:36:7c:47:73:cc:7b:4a:0e:86:
d7:bd:d9:1f:d6:84:36:8a:d0:ef:33:70:31:ab:ba:
9a:63:0e:f3:08:c9:57:c3:1f:85:8d:44:cb:fa:0e:
8b:e5:01:63:00:6b:01:dc:d5:b1:d1:4c:3b:0c:07:
43:e7:53:dd:9e:56:89:27:01:ce:fb:aa:85:3d:7d:
eb:c3:54:e0:9f:9b:39:0a:48:ba:26:6f:0f:8c:06:
f1:71:35:c4:d1:d6:fd:8a:d2:7a:d5:f9:b5:11:d6:
60:33:3a:1b:e8:9e:47:23:b8:4e:e7:d8:32:41:5e:
57:94:04:40:58:a6:b5:03:13:16:97:52:ac:38:1d:
81:8f:41:3e:72:f3:d7:0c:68:20:9b:05:c4:ef:6a:
70:b9:5c:42:78:0b:71:a7:b4:67:97:0f:1b:c0:aa:
a9:5d:27:89:c1:04:e2:75:62:ca:2b:c0:84:f1:b5:
47:d2:64:08:46:d6:4f:72:19:ca:6c:fc:2d:9c:ed:
3f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DA:3F:73:9C:A0:82:FF:E8:87:F7:03:06:E7:FC:74:84:60:6C:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.40.0/21
46.255.104.0/21
77.245.80.0/20
80.246.176.0/20
81.24.48.0/20
82.201.0.0/17
83.219.64.0/19
87.250.128.0/19
93.188.248.0/21
94.247.192.0/21
185.28.148.0/22
185.55.128.0/22
193.91.48.0/20
193.189.134.0/24
194.105.138.0/23
212.204.192.0/18
213.130.160.0/19
213.133.32.0/19
213.197.192.0/18
213.206.64.0/18
217.115.192.0/20
217.148.80.0/20
217.149.64.0/20
217.194.96.0/19
IPv6:
2001:67c:1a4::/48
2001:898::/29
2001:9a0::/32
2001:14a0::/32
2001:40e0::/32
2a02:f18::/32
2a02:f30::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15879
Signature Algorithm: sha256WithRSAEncryption
6e:f8:41:eb:11:dd:50:40:23:ff:63:c7:d8:99:33:9b:1f:08:
c8:64:7f:d5:a8:0d:dd:6e:24:82:1d:e4:75:ad:fd:8b:7b:b3:
1a:71:26:b9:2e:0f:ca:23:28:b5:63:9d:60:e7:bf:16:5a:26:
dd:8d:f1:9c:8f:d4:5c:7a:5d:90:ae:2e:e4:a1:f9:2e:7c:a1:
f2:30:f4:bd:f3:0f:04:a0:56:10:5e:32:32:39:0e:88:ca:7a:
23:9c:5d:7d:ed:29:ef:b9:fe:5b:52:ee:17:6a:e3:93:4a:37:
fc:55:91:f8:51:bd:3a:3f:69:5e:17:e4:ec:27:f1:7b:45:22:
67:77:c7:59:d6:dd:ae:4d:a7:4d:ac:cd:e8:f1:50:70:4f:09:
86:a7:ab:62:f9:c1:03:2f:ca:82:e5:f0:14:34:c1:af:ce:b9:
f7:b1:14:13:1e:ad:78:3f:51:7c:34:29:d7:5d:db:3b:04:d6:
da:53:eb:f9:82:2f:b9:e2:63:34:da:0e:99:96:7c:4e:31:00:
ad:97:3b:3e:d0:37:5a:2a:99:d6:a3:0e:52:cc:57:d7:12:29:
52:ab:24:53:11:aa:31:38:eb:5f:3c:f6:18:1e:ae:dd:bd:ca:
02:c1:28:08:4b:6a:62:7e:1c:97:53:b7:82:98:60:05:ec:86:
74:d3:22:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:05 2025 by rpki-client