Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer
File: fXhWyXvrl8KzhvuVjC2xIsV9s2w.cer (raw, json)
Hash identifier: IHj0gG9IIy7h/z0zs03c+taXXzSod3BBSdi9c47xZBM=
Subject key identifier: 7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FB39471F3F1812D6679952F6DC655
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34236
AS: 41943
AS: 215331
IP: 84.246.128.0/21
IP: 217.25.32.0/20
IP: 2a03:f600::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b3:94:71:f3:f1:81:2d:66:79:95:2f:6d:c6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d7856c97beb97c2b386fb958c2db122c57db36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:01:fb:e8:2c:fc:30:d5:4f:00:02:a7:f0:7b:
00:60:f9:4e:e8:c1:b2:f5:1e:27:4e:33:3f:bd:4d:
5f:dc:a9:03:82:64:9a:ad:86:f0:53:7e:cc:2e:b2:
4c:1f:f0:8f:b1:9e:2d:fe:3b:81:e6:a0:e0:79:89:
f3:bf:cf:3e:54:67:cb:c6:f4:f4:07:50:2a:d9:be:
22:8d:20:24:3f:60:ef:8f:ff:ea:90:7e:f3:28:38:
28:78:d8:6a:a6:78:2b:92:ca:f7:0f:45:f9:f7:c5:
0b:52:b2:6e:c3:bd:78:e4:37:2f:fd:af:c5:7a:7b:
30:1a:09:2d:73:a9:98:76:0a:cb:bd:d5:61:f8:72:
a6:a4:04:1a:86:a2:c7:5b:16:b7:35:32:46:6a:42:
04:80:0e:bd:1d:38:90:95:36:9d:ff:e6:2e:8a:19:
1a:9d:9f:70:9b:71:1a:2b:a4:51:8f:5b:b4:06:98:
b0:dd:a6:68:9d:51:e3:bf:eb:00:b6:0c:1a:dc:4d:
bf:f5:e4:a5:8f:47:08:57:c9:8a:a1:53:9f:30:82:
45:43:5c:3b:d0:56:67:37:25:e1:43:ed:f3:18:7c:
83:44:44:a4:7c:2e:cd:25:53:83:16:6e:fa:29:21:
00:4c:b4:5f:4c:97:31:e6:f3:7b:ed:60:76:39:6f:
93:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:78:56:C9:7B:EB:97:C2:B3:86:FB:95:8C:2D:B1:22:C5:7D:B3:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c03d37-4efc-4c3c-8281-3c738544482e/1/fXhWyXvrl8KzhvuVjC2xIsV9s2w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.128.0/21
217.25.32.0/20
IPv6:
2a03:f600::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34236
41943
215331
Signature Algorithm: sha256WithRSAEncryption
81:f5:19:96:b2:fd:59:14:f8:e1:8e:a8:93:46:63:c3:3b:06:
5a:5a:ab:b3:6d:17:97:6b:bd:8b:fc:f7:4d:a8:6b:77:02:e7:
22:1d:72:ca:24:c9:ca:40:38:f9:c3:e2:16:51:f7:f1:1a:54:
42:15:89:4f:25:f8:e9:b6:32:8f:23:fd:06:05:91:ab:2b:61:
8c:0e:c0:af:f1:19:d9:98:9e:b3:80:ae:92:07:96:27:b2:cf:
dd:ff:8d:52:d7:3b:75:35:73:07:0e:fe:39:9d:1d:1b:b3:ef:
f9:e3:14:ea:80:09:b7:7a:b3:6b:ff:bb:1e:b9:7f:e1:3e:5d:
27:5a:6a:ff:af:20:d8:be:07:1c:7f:88:75:2e:82:58:d1:e7:
51:3b:1f:a2:7c:cd:71:e0:5f:df:62:71:19:47:aa:97:70:ea:
49:bf:c0:c6:9e:d3:21:c6:00:b1:fa:3b:dc:64:29:92:7c:b6:
9e:0d:ed:64:21:27:25:70:3e:af:d8:4d:ea:e8:9f:1a:97:68:
36:b1:47:ff:9f:4f:74:47:ec:b1:2c:c7:6e:24:db:28:73:0f:
fe:80:d3:ae:d8:57:84:6d:cd:16:16:25:fa:2c:e8:49:ee:b8:
12:21:22:65:f9:55:d1:d9:60:7b:45:67:2d:b5:1e:6d:dc:e6:
05:e6:28:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:49 2025 by rpki-client