Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jYhinjx4EKzCKOF6GNtnlOvtgZM.cer
File: jYhinjx4EKzCKOF6GNtnlOvtgZM.cer (raw, json)
Hash identifier: RK2mRV+yrHELXTFGznTnm/fvkpwPMWcmlIqiYecUdaM=
Subject key identifier: 8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9DB173544E90B0A17AB3D1A9D5781
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205428
IP: 185.216.164.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:db:17:35:44:e9:0b:0a:17:ab:3d:1a:9d:57:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d88629e3c7810acc228e17a18db6794ebed8193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cc:1a:3c:73:17:05:b2:32:e4:6d:3f:3f:01:
00:89:50:ef:24:5b:ef:f8:20:81:70:bd:10:da:76:
9f:a5:f7:8b:15:94:43:27:50:fa:ce:f6:de:d6:7f:
c5:ea:36:05:ef:1d:e9:70:03:ca:41:79:dd:60:b4:
ff:44:26:6f:02:55:bb:4b:6c:b0:c4:c3:ce:86:2d:
ed:26:64:de:92:01:28:62:e5:2e:b1:eb:19:99:7f:
3e:6f:cf:fe:dd:63:a2:83:21:78:0c:1a:92:4c:88:
ec:10:d6:e7:57:5b:e8:f5:2b:2a:48:71:5b:9d:c7:
ee:39:24:fb:77:dc:5e:7b:09:f7:e6:9b:10:fb:95:
6e:8b:79:23:df:e8:ee:7e:ee:f9:07:c3:8d:80:74:
e4:22:b9:75:65:b7:14:4f:78:09:a3:9b:4d:01:00:
1b:28:43:1f:b9:93:00:da:00:0c:b5:9b:cd:c2:19:
fc:27:64:5c:20:21:17:44:5d:1a:09:bb:9d:4e:40:
01:f6:11:09:3f:a5:7d:50:0f:75:8d:43:00:93:a8:
9e:6b:9f:95:6a:89:bb:09:98:66:40:3d:21:08:59:
2b:a7:cc:18:6c:59:48:08:fb:a9:be:c6:4f:92:62:
7e:a4:92:d1:2f:9f:5a:2e:b5:09:a1:a7:54:4d:95:
f0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:88:62:9E:3C:78:10:AC:C2:28:E1:7A:18:DB:67:94:EB:ED:81:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/873b2d-e20c-41cf-90d2-4be1053d1fc4/1/jYhinjx4EKzCKOF6GNtnlOvtgZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.164.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205428
Signature Algorithm: sha256WithRSAEncryption
a7:b1:34:b1:04:2d:b8:9d:0c:1a:fb:21:4d:27:ad:36:50:2a:
04:a5:a9:e7:ff:48:73:82:a2:8c:17:07:0a:cf:c8:83:d5:23:
e4:6d:68:16:a5:6e:4d:4a:1e:f1:b7:23:d4:05:30:5f:ce:50:
bf:42:47:3a:93:42:68:00:a0:70:b1:2e:d9:37:3a:a5:ee:c4:
d1:69:37:4c:41:68:0a:85:fa:1e:2a:a8:45:a6:ae:99:f7:d0:
5f:80:5c:af:dc:9b:aa:ad:f6:69:13:5f:df:84:9e:1e:9b:02:
35:54:12:6c:2f:b7:f3:c2:89:6e:de:92:9f:9b:62:e2:44:84:
ff:b4:7d:da:d6:98:0c:ab:07:7a:e8:c1:8c:37:64:9a:7c:a9:
c5:ec:19:0a:75:70:3d:a4:50:03:e3:52:fc:5b:63:30:7b:a8:
21:23:e2:e5:ff:e0:73:14:30:57:82:1f:eb:bb:31:bb:5a:95:
5a:9b:97:45:48:7b:64:ba:3d:0b:c8:e9:db:61:9e:af:5f:1f:
11:32:d7:bb:da:f2:01:66:f1:e8:44:65:b0:dd:da:9f:8e:44:
c0:a2:61:c2:b6:18:cf:47:06:d8:6b:f4:6d:ff:32:72:21:f5:
22:0c:93:15:6d:f4:6b:e8:1d:37:86:3a:ec:4a:f8:74:bf:3f:
46:f2:65:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:22 2025 by rpki-client