Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
File: eTT37l0EoCYiPDqjGRK_YQ0A23s.cer (raw, json)
Hash identifier: VUXnSNZg+sn7JyMr9mO9wCLF/tPP33DdyBTmDTODUuo=
Subject key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDE7A534C626E0C189B4471A1B4E14
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212209
IP: 194.88.0.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e7:a5:34:c6:26:e0:c1:89:b4:47:1a:1b:4e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:99:8c:be:35:cf:47:e5:45:da:c7:c8:fd:
27:eb:5b:5a:68:7f:79:a9:1d:9f:1c:36:9a:9d:99:
dc:60:d6:73:7f:91:45:96:d4:50:06:9a:7f:6a:cf:
6b:8c:51:6b:bd:63:8b:57:f2:23:78:01:3a:4c:5f:
bf:2b:7d:de:8a:f7:91:6a:86:d7:5e:e1:98:88:9a:
5c:ab:37:f6:df:ee:d9:19:46:04:06:f8:34:dc:e7:
1f:f4:db:04:29:c5:15:a6:7c:9d:4f:9f:21:7a:6f:
d0:1a:58:8b:78:7c:5f:b9:09:c1:09:4e:33:59:c9:
47:59:1d:2f:4a:76:96:bb:c8:bd:71:fc:9a:6e:32:
58:87:1b:73:4b:19:5c:de:21:a2:3f:46:ad:c0:15:
d0:ee:51:40:e3:11:b5:e6:df:38:cb:13:45:7e:8e:
88:e0:56:d3:54:9b:25:19:e4:7e:b0:a5:51:36:2a:
b7:2c:47:24:e3:e8:37:de:16:74:b7:db:f6:2e:d9:
67:c6:cf:f7:e0:77:3f:45:44:b2:b9:80:17:74:81:
26:71:72:da:6e:c8:96:83:11:35:ec:fd:3f:20:ab:
f3:4a:81:83:ef:c4:e8:75:79:6f:3d:80:c7:31:d8:
55:76:29:e4:f9:09:92:be:66:2c:ab:80:26:60:eb:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.0.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212209
Signature Algorithm: sha256WithRSAEncryption
2c:69:b5:94:9b:f2:b1:6d:70:c2:4a:2b:65:e9:a2:ce:25:38:
e4:fd:8c:41:77:15:58:80:7f:c6:b0:23:18:33:bc:91:12:98:
e3:1c:47:d5:0f:5e:84:2f:c5:4b:6f:60:94:df:12:12:f9:0a:
d1:fc:c8:bf:ad:3f:44:88:18:01:c5:6a:90:9e:f3:dd:f4:66:
64:5a:dd:8f:e5:4a:3c:2d:5f:86:36:05:d9:41:76:4f:f1:d0:
b1:40:76:10:be:6b:59:76:06:6e:66:0e:57:36:44:8f:2a:a8:
07:be:f5:4e:d8:63:b4:41:6d:e7:0c:1d:74:bf:95:bb:dc:80:
5c:8c:00:f5:5d:6c:92:f3:34:89:db:d8:9b:84:c4:aa:2e:5e:
75:e9:de:c3:b0:cb:ba:3c:6a:c5:6d:14:74:7e:c4:d0:17:82:
06:0a:e7:e0:28:ee:13:b7:5a:b2:a8:47:5c:ae:35:4c:0d:1f:
0a:84:9c:d3:1b:e5:ea:b4:06:9c:9d:06:5e:93:6e:d2:ff:ef:
e6:0c:15:6e:b4:f7:84:95:57:a9:2a:44:c7:5c:1c:50:c4:73:
9f:43:82:f3:11:62:1f:89:f2:11:e8:75:0d:59:02:bc:29:01:
09:e6:0f:12:87:db:1c:ef:5f:bd:63:6f:87:52:8f:03:b3:52:
ab:9b:6c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 14:10:25 2025 by rpki-client