Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
File: jfPflxqnyyXft8tVspyHvL4yCCk.cer (raw, json)
Hash identifier: W6LsUF9JUQdCN+5QyNZlftNL0RxIGOO/MIdmrJ+d6UU=
Subject key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521B2CE2D117D3B1F6E18B0A9B02777
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199155
IP: 193.236.32.0 -- 193.236.95.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 14:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b2:ce:2d:11:7d:3b:1f:6e:18:b0:a9:b0:27:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:6b:12:13:ca:57:74:a2:c8:b2:5f:30:77:
ee:9e:8e:f1:a5:e3:84:4e:0b:69:38:61:bd:b1:64:
ce:ae:d7:23:6f:c1:2a:a7:24:16:f2:28:eb:0b:da:
1f:75:47:9c:23:5b:ed:33:53:6c:73:02:5a:81:11:
80:6d:cb:b3:db:b0:6b:a0:65:cd:a8:0e:1f:ac:ea:
f6:d9:de:70:38:3f:2b:86:09:2e:c6:df:09:df:f9:
d5:05:13:aa:af:dc:3c:cb:71:57:7a:aa:fc:9b:0c:
d3:52:82:50:11:68:97:bf:31:49:64:1d:cf:12:af:
bf:82:25:b3:f9:06:7d:21:b9:3b:a2:24:1a:7d:d5:
ce:df:d5:21:26:11:d9:02:3b:f0:46:91:7a:e7:98:
77:74:40:2c:3c:6f:17:b5:34:66:12:ee:8f:0f:24:
5a:7d:59:a0:a6:e8:25:e0:6a:b0:5b:60:9a:5c:aa:
49:c9:2b:ea:97:3b:4f:84:2b:4c:2d:d3:92:1c:7d:
52:8b:8f:27:eb:25:aa:88:67:f0:34:20:b9:7d:a7:
3e:18:19:d2:51:60:37:d4:64:0e:4e:40:2d:a5:f1:
72:5d:28:d4:09:a0:dc:fa:da:de:51:f0:a8:bd:59:
97:b8:5b:2b:10:e1:2e:26:c3:32:0a:e7:87:d0:6c:
7f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.236.32.0-193.236.95.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199155
Signature Algorithm: sha256WithRSAEncryption
a8:6b:73:6e:e1:73:55:ab:eb:ac:cd:d3:37:f2:e1:5c:4d:7e:
6c:7d:fc:30:86:95:33:ab:18:16:8c:e0:23:ce:91:8a:55:51:
a7:bb:a2:67:1c:16:a3:d9:17:64:59:73:61:2b:1c:5c:cb:27:
04:d6:4b:0d:bd:8c:bf:40:4e:ff:87:cb:ca:9c:1f:4d:4f:ba:
33:31:ed:3e:51:ba:9c:fe:b8:43:0c:67:82:c2:77:07:0b:57:
de:44:4e:11:9a:06:0a:53:76:03:d6:f7:c8:89:85:8f:e2:f0:
33:f6:2b:d1:1b:83:7b:f1:82:1f:f8:dd:0e:e7:b6:42:e9:89:
c2:47:ba:cb:3f:c2:67:1a:28:5e:af:17:bb:71:5a:58:68:51:
b5:b5:7a:2d:da:e9:b8:10:6a:28:43:fe:d2:6a:8f:67:01:57:
57:c3:11:e5:34:fc:0b:ae:74:c3:7d:d1:71:98:f8:90:2b:c9:
97:36:10:7f:ba:65:36:98:53:ca:e7:3a:16:fa:19:11:e7:73:
73:37:08:10:2f:12:df:67:6c:17:bd:a6:03:71:7c:56:37:ed:
a3:61:a5:14:f8:00:c8:5b:ad:57:38:63:86:d3:71:c5:16:5c:
76:25:78:af:2b:65:43:17:f5:d7:43:60:eb:b7:dc:1f:85:ed:
f9:32:0b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:38:56 2025 by rpki-client