Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
File: fJEmcywvAZO8PeTo06vBX0uu1i0.cer (raw, json)
Hash identifier: yFHSoNeG0SCyiPH5c5muDBJMQ8hmJ6BHCFTaGFhz08Y=
Subject key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC2527A02C868C6782A3628545902B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215927
IP: 5.252.8.0/22
IP: 45.156.176.0/22
IP: 2a06:f6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:25:27:a0:2c:86:8c:67:82:a3:62:85:45:90:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:19:94:9c:65:33:a6:8a:89:67:9f:a7:29:cf:
51:e4:e1:96:d0:f2:97:95:76:88:35:57:0a:ae:a1:
8c:7a:35:16:0e:5e:a2:72:3b:f6:64:e7:89:8c:71:
3d:b8:4c:32:4a:a3:35:05:71:7f:22:6e:b3:8a:31:
6f:7a:e1:1d:55:9a:1d:3f:82:24:62:30:f0:d7:1d:
25:5f:9f:ad:07:40:0b:88:6c:34:3b:1a:0d:46:fe:
63:99:38:eb:bc:74:a0:fe:1a:b3:47:fe:81:17:53:
30:e3:2b:43:e4:ad:d9:48:b9:37:3d:bd:e1:2f:f8:
36:f7:cd:5a:43:c4:7c:a1:c8:8b:66:a4:99:b3:9a:
dd:3a:a8:68:1b:4c:5b:f7:5c:11:31:01:e2:8c:25:
a8:4c:b4:b2:0b:c9:30:a5:66:23:53:a1:4e:97:12:
5f:42:64:4e:c7:26:a7:9b:84:df:41:0e:2c:28:cc:
a1:29:19:55:ff:05:ac:98:84:69:45:fe:31:0e:56:
5f:1e:41:0c:68:e7:c0:0e:0e:20:5d:3d:36:06:18:
1a:fd:9c:c7:88:98:37:72:f9:cf:f7:ea:e5:db:0c:
da:36:08:88:ac:2c:56:e5:8a:fa:7a:04:b3:f3:ce:
8e:c4:08:b5:50:5d:e5:c1:41:a8:be:cf:9c:76:fa:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.8.0/22
45.156.176.0/22
IPv6:
2a06:f6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215927
Signature Algorithm: sha256WithRSAEncryption
16:38:12:71:c5:cb:f9:0f:f5:a4:da:55:11:7f:92:a1:72:e6:
20:06:da:85:83:95:5e:99:2c:53:06:ec:39:20:0e:dd:4b:fb:
a2:09:1c:0c:07:e6:cd:06:d3:e8:4e:45:6a:b9:ba:3e:00:79:
e1:99:65:59:60:f7:72:c5:ff:79:95:47:d1:72:4f:d8:81:9d:
b7:9b:20:d1:1a:3f:b2:b4:39:35:47:9d:da:31:ea:8e:22:fa:
d5:6f:96:13:aa:6b:77:3d:51:41:bd:73:7a:2f:f2:0c:9c:64:
e0:4d:6a:e5:1f:26:89:dc:75:d2:f2:2b:f6:06:2f:34:81:5b:
fe:d3:81:db:9b:8d:98:9f:dd:8a:2c:0f:d6:fb:de:42:1d:28:
fb:36:bc:ff:70:51:ad:a3:82:39:56:dd:bd:3f:b9:12:87:b9:
22:64:b5:33:30:12:66:44:dc:27:92:a7:d9:e5:5f:18:fd:fc:
c0:f0:23:e0:05:01:c1:a0:47:8c:75:4e:b7:6f:77:a5:bd:50:
79:fe:75:e3:51:3e:59:e9:0a:67:70:08:79:27:27:c4:b9:8f:
85:a8:e3:8d:13:ae:7f:61:5d:e5:2d:9c:47:ca:ac:f2:7f:4d:
37:21:9c:b6:56:f6:01:e1:3f:43:c2:ca:5f:be:1f:ce:8b:63:
e2:2a:34:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:52 2025 by rpki-client