Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
File: k7ke76bYBG2RjjZARWBJUmQLwV0.cer (raw, json)
Hash identifier: VmeVOOlWP9rkyPgZE6v7a54nK1IMboETUejkVj6oPZ8=
Subject key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E273CD7186A7C621246E53F1C093C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208017
IP: 139.28.156.0/22
IP: 2a0e:ae80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:27:3c:d7:18:6a:7c:62:12:46:e5:3f:1c:09:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93b91eefa6d8046d918e364045604952640bc15d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:56:df:70:53:52:bf:01:b1:5e:43:8d:cd:
25:81:f3:ea:a3:2e:11:08:54:09:d8:cd:5b:79:40:
27:c3:b5:c0:da:25:d2:14:f7:f2:a5:31:87:8c:1a:
74:2b:32:8b:b3:c0:bc:cc:64:d1:ba:6c:67:25:12:
f5:23:1a:4c:fd:24:f0:9b:16:0b:7c:5b:e3:ad:5d:
4f:cb:c6:e9:67:7d:b8:de:8d:f9:97:52:d8:c4:bd:
13:e2:dc:3a:3f:81:dc:97:de:7f:d0:f4:c1:e9:fd:
31:6a:b9:5d:28:f7:5f:a9:76:b2:66:8e:47:3e:58:
e6:fc:98:ec:bf:d7:b3:14:72:a3:93:8a:d5:f3:58:
f6:1b:32:f0:43:e7:8d:53:39:53:d4:7f:7a:31:2b:
16:df:b6:16:75:3a:a4:ae:f9:e9:02:22:34:21:ca:
be:66:7b:4b:38:a1:9a:8a:fa:c1:b8:ca:1d:47:71:
6c:81:ec:e2:6c:75:a3:1e:c6:26:ce:60:bc:9e:35:
fe:bf:1f:a1:dd:b2:55:da:33:46:2b:19:9d:f0:00:
9f:fc:1d:fc:16:95:3f:f3:39:d5:04:1f:d5:58:06:
42:fb:0b:7f:79:bb:2c:e0:ed:23:08:50:96:89:7a:
f7:04:de:a0:2e:e1:2a:13:58:82:eb:db:c7:d9:38:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.156.0/22
IPv6:
2a0e:ae80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208017
Signature Algorithm: sha256WithRSAEncryption
86:73:b6:e6:9b:e2:13:84:11:e8:83:e5:e2:04:50:22:65:e2:
89:a8:b4:ab:93:95:6d:1a:cc:c5:e6:e5:b5:22:16:13:18:2e:
38:a9:9b:10:a2:98:38:33:75:89:21:f4:b0:57:d8:00:16:39:
9e:d3:34:c7:1b:60:e6:ac:02:9f:e1:40:ea:62:de:ff:d9:d1:
5b:a6:ff:80:05:f9:ad:48:f2:e6:dd:5a:e9:66:f6:6a:9a:d2:
c0:e2:b3:89:89:d1:a3:0c:40:a1:e3:c9:43:c9:21:7b:7a:e6:
f9:1a:ce:a1:b8:4e:38:a1:c3:61:4a:40:a4:3d:75:b0:40:d0:
73:8c:05:9a:db:22:c9:29:74:d2:2e:a3:1a:97:d6:0c:13:27:
80:1c:fc:0c:f0:c1:b6:f2:80:6f:ac:2e:46:b9:62:3e:fe:5f:
64:2b:5d:d5:ca:7e:07:66:cf:4d:04:d9:73:de:5c:a9:d2:99:
d8:53:c6:64:0c:22:c8:82:f4:3e:42:d7:c1:7f:67:9e:6d:a2:
23:83:d8:6f:61:f6:99:27:ba:2c:bf:79:6c:e5:a9:de:ca:91:
e2:12:92:64:40:d3:a3:8d:f3:b2:14:d1:1b:19:0d:25:6d:07:
f2:45:b1:79:ee:d6:2f:41:c9:9a:18:db:16:42:4e:93:19:c3:
71:bb:c7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:12:39 2025 by rpki-client