Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer
File: jyrkXFCQQaeWqWiVNYH1HUW_zlU.cer (raw, json)
Hash identifier: mC9oYkUcCmiil1ky+OpIaffKAmJPd0xZsrGu84Cau9M=
Subject key identifier: 8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1EE0396B0D9FD3480F3442508E655
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42917
IP: 77.75.112.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ee:03:96:b0:d9:fd:34:80:f3:44:25:08:e6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f2ae45c509041a796a968953581f51d45bfce55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:56:63:43:73:66:f9:40:5d:5e:ed:3a:96:
77:68:0e:87:c9:18:3d:76:66:e7:ab:71:26:5b:b0:
c8:8a:1b:f6:18:47:22:9f:33:f7:ee:b8:44:8b:be:
db:22:6c:bb:28:f0:94:2d:3f:75:af:91:07:c1:8a:
8f:94:e0:c4:b3:b1:ce:b9:48:ca:a7:f6:7d:3f:eb:
cd:00:37:4c:4f:99:34:e2:47:6b:35:39:bd:ba:54:
05:f3:4a:70:dd:84:76:a9:a2:7c:b6:c8:43:2b:34:
c9:1e:dd:89:73:77:0f:ae:62:89:91:ea:56:cd:22:
e6:a4:12:dc:be:88:82:b9:21:57:72:0e:04:22:de:
83:f2:e6:05:cc:c1:69:7d:5f:96:81:66:20:74:fb:
09:7d:7d:64:f4:40:6f:28:82:3b:2c:5c:59:5b:dd:
38:26:f1:a4:7e:37:74:ca:9f:30:bf:d0:5c:fb:7d:
c2:dd:c8:83:9a:40:f2:83:d4:d8:83:50:b8:0e:8f:
59:2f:6f:64:af:b0:52:2a:3d:f8:92:53:a7:af:48:
9f:37:8b:b3:ec:9a:e6:38:56:50:65:14:b5:d1:10:
81:91:b4:09:a3:d8:35:95:25:36:26:11:fa:3a:86:
8f:15:c5:3c:f7:fc:60:62:53:85:4b:f8:3c:ae:d6:
aa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2A:E4:5C:50:90:41:A7:96:A9:68:95:35:81:F5:1D:45:BF:CE:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/93901a-043b-49c8-ad37-ac7f21b6b74d/1/jyrkXFCQQaeWqWiVNYH1HUW_zlU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.112.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42917
Signature Algorithm: sha256WithRSAEncryption
78:74:cc:35:3a:ee:8f:39:98:d5:4d:81:42:b5:e6:e4:11:b1:
c9:2f:ff:b9:42:96:47:02:eb:6e:7d:80:c7:af:85:ba:2d:3b:
42:e5:85:14:b4:2c:2d:5e:17:dc:df:65:6e:4d:4f:1b:e8:ff:
f6:e4:7a:cc:58:df:a0:48:7c:9f:13:85:c7:b4:eb:0c:38:82:
eb:63:40:37:44:3f:ce:bc:4d:c8:66:43:6b:bf:75:a5:24:03:
8b:0b:ca:72:c6:6a:03:86:57:0a:54:f8:d1:e9:e0:8f:ac:99:
a1:79:24:44:0b:e5:7b:09:1f:ae:2f:d0:ba:9a:e4:6a:e5:b5:
f4:bd:c8:ac:94:f9:62:fe:c1:46:f1:c3:9a:12:b4:06:46:78:
ab:30:ae:96:6e:32:c9:2c:8d:26:15:3e:a5:e4:f2:8b:18:18:
07:ee:03:7b:19:41:9c:ca:d3:19:54:4a:bd:b5:2e:ed:7c:65:
1d:24:00:c5:7a:fc:c0:98:cd:bf:86:8e:93:17:25:24:93:17:
86:ad:97:7c:e9:48:88:61:3d:f0:f4:31:1b:7d:93:ea:8e:ec:
97:15:bd:0a:b3:b8:4c:b6:e7:f6:7b:fe:d4:0b:5b:7c:d0:ec:
17:f1:e1:55:d6:e1:76:5f:03:7c:11:6e:a1:9c:39:78:65:cc:
33:58:82:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:59:12 2025 by rpki-client