Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer
File: eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer (raw, json)
Hash identifier: uB12OMz7nBYrOK6nLZ2CSqFEilQ91K8G+b/5rfyJxR4=
Subject key identifier: 7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B28C9EDC6C04CBEC9A3705803C4756
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50136
IP: 185.79.88.0/22
IP: 2a05:7000::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:8c:9e:dc:6c:04:cb:ec:9a:37:05:80:3c:47:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b243b732e564690482cc825199f8b591b01f6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:63:f4:39:e4:12:43:54:e1:e3:11:c0:17:
16:c1:e5:64:35:65:ae:e2:a4:db:51:bf:39:0a:b5:
8e:f6:22:2f:00:fa:a3:5a:27:48:58:32:ed:db:01:
75:da:22:9c:5a:90:bc:6e:63:8c:fc:c1:bf:8d:a0:
85:6b:48:1e:5d:99:d7:2c:96:1d:e7:54:a9:eb:b4:
e8:2f:23:4a:7d:28:7c:10:72:7b:63:b0:5d:6f:ce:
40:c2:2b:71:51:b0:07:7d:b0:33:b0:cd:83:e6:39:
e6:ab:1d:e6:3a:f7:70:91:21:40:21:48:7f:89:95:
99:fd:ed:2f:b5:5b:44:f0:af:60:8e:b5:10:3a:a7:
54:58:77:73:89:a1:18:90:5c:92:a2:f4:ae:c9:1c:
0b:79:7b:23:15:36:2c:29:cb:39:32:a5:d1:3f:b3:
5e:4d:fc:14:aa:6c:46:39:22:b3:0b:e9:31:e4:53:
37:e0:1f:a5:9d:57:09:2c:00:74:e0:ed:e9:3e:18:
98:25:09:c5:f9:6a:30:05:2e:cf:07:3a:09:20:23:
fd:8b:33:9c:3a:0e:c0:87:ea:5c:5f:ad:62:b2:d0:
33:c2:0f:7a:78:4d:90:3f:cb:57:6b:0a:62:44:bb:
13:59:51:b5:50:25:90:f9:b0:08:bf:27:86:4c:f5:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.79.88.0/22
IPv6:
2a05:7000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50136
Signature Algorithm: sha256WithRSAEncryption
4f:c7:63:aa:ae:80:ab:5e:4d:e1:78:97:d3:d3:b7:75:85:6d:
e3:2f:a7:c0:c1:ed:5d:77:80:2d:6c:d7:2d:25:e7:f2:a5:50:
c1:c2:af:0f:60:e0:9c:f0:14:47:b6:39:33:54:34:b2:44:0c:
03:e2:54:90:a7:bd:27:e3:c3:c3:11:9c:a5:80:be:5c:77:57:
bc:d6:e5:bf:fe:6c:08:0f:bf:08:f5:28:64:cb:eb:a7:6b:b1:
91:a9:eb:32:92:03:21:06:b1:48:fb:88:74:cb:a6:2d:d9:53:
aa:cc:97:4e:95:d4:33:17:0d:9a:78:27:c6:eb:86:dd:9e:fb:
12:e8:43:bc:4f:fb:51:4b:f3:0a:9d:81:a7:ea:92:92:d1:c1:
52:d6:d3:2b:c6:97:e0:ba:37:b7:9c:97:50:06:1e:ad:21:d6:
b8:28:db:ac:8f:67:27:bf:81:c9:68:77:68:10:c9:21:00:1e:
14:01:fb:c3:0a:01:b2:c0:77:66:f8:3b:30:f5:a9:1e:14:a9:
5a:a8:d6:62:a0:f0:c6:c3:a1:45:04:d9:88:e2:91:f5:ce:69:
3e:77:96:4f:8e:bd:80:72:79:7a:bd:4e:c1:81:fc:21:6f:9d:
e1:41:74:d1:71:ce:85:d0:4b:9a:2f:fb:d2:d9:d5:ff:1b:79:
cf:73:70:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:46:43 2025 by rpki-client