Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
File: kRbcv3jGLVHakHag0Gra027jt1U.cer (raw, json)
Hash identifier: b2hOSf5vN6eIwzT5sCjXYHDEJaY7WAWUG+yJbbayIY8=
Subject key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B24BAA8904A243781B5D5C7B76931E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43272
IP: 77.247.248.0/21
IP: 185.177.28.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 20:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:4b:aa:89:04:a2:43:78:1b:5d:5c:7b:76:93:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:63:a2:c6:81:1a:88:94:e2:85:7a:81:1e:cf:
ab:26:e0:aa:77:ad:bf:eb:4a:63:f8:da:8b:8d:86:
7b:d7:a7:50:51:0e:e8:c7:db:e5:13:97:7a:2b:06:
79:5f:70:78:e3:c7:e4:0b:ae:be:d7:73:bc:de:8f:
de:18:45:d8:31:0f:4e:1d:d5:50:a5:44:70:28:16:
ac:b8:33:90:41:6c:d2:37:1d:11:6e:96:b9:bd:7e:
ff:04:fe:5a:6e:d1:5d:aa:df:bc:06:ca:7a:fb:25:
04:49:3f:8d:e7:25:75:f6:0a:54:d7:eb:9c:52:ed:
64:6d:59:63:cc:b7:45:e8:8f:6b:0c:65:95:df:24:
87:58:c0:82:d2:d1:0f:3a:65:53:cb:e2:89:93:2e:
63:f9:44:30:db:1f:23:7d:8a:f7:f2:31:db:d5:8e:
9f:eb:ca:43:e0:d5:d0:90:31:0f:35:df:f5:90:a4:
4d:d0:84:c8:33:89:72:d2:3e:44:e0:8b:d1:8b:8d:
89:fd:ec:d0:a1:ec:d3:30:4c:76:4e:47:4d:df:7a:
1b:ae:13:ee:8c:51:fd:d2:8e:24:44:f9:95:62:b0:
de:34:e3:d4:7a:d1:75:b8:45:b4:15:ea:53:ef:10:
cf:ae:19:e3:e1:92:ff:d0:9e:dd:a1:4f:f2:19:e3:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.248.0/21
185.177.28.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43272
Signature Algorithm: sha256WithRSAEncryption
7e:ee:20:ac:63:c6:bd:aa:e7:bf:04:2c:91:84:d3:39:7a:c7:
56:e5:59:ff:31:cd:7b:b1:9f:58:d5:fc:ab:ea:8c:9d:93:4c:
2f:b4:f3:d8:ae:8f:73:89:c8:f9:c4:91:61:f1:98:77:d6:ff:
d3:0d:b3:28:52:87:95:d8:d7:6c:9e:71:52:c2:d3:e6:fe:4a:
12:fb:1d:a0:47:5f:fc:83:0a:48:61:00:0c:ab:7e:70:e1:ac:
27:54:2b:6a:99:f0:b7:9a:b9:3b:04:66:65:c3:c2:31:62:dd:
ee:9e:aa:c8:db:7d:93:a5:5f:81:ed:79:66:b7:ce:48:cc:d7:
15:f5:46:c8:9d:c1:4d:e2:ac:38:12:43:6e:bf:97:e4:95:7f:
be:fb:06:a2:e0:14:d7:aa:21:41:0c:09:bb:67:72:e3:cc:1a:
be:33:93:e8:d7:64:69:bf:9e:62:60:88:19:58:be:39:23:e1:
fd:ca:5f:b8:b4:8b:c9:36:87:13:a4:fb:db:4e:aa:49:cc:1f:
de:54:a4:e0:03:e6:f2:3c:9a:91:9c:03:be:58:c4:eb:b9:c9:
79:c6:df:1e:1d:3c:7f:85:6a:f9:3e:a6:0b:0f:91:60:4e:43:
91:00:b7:5d:89:d0:f7:6d:5d:c0:7c:9e:20:6b:80:a3:14:f0:
8f:2a:f8:71
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 23 02:37:30 2025 by rpki-client