Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
File: ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer (raw, json)
Hash identifier: QUCfxHO4Z4NXAPEKvaX9PGeo8JjsfKTjHNYFpTiHDmw=
Subject key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942748195977B8084B922173E59BE1131E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39271
IP: 46.19.128.0/21
IP: 87.238.144.0/21
IP: 185.186.72.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:19:59:77:b8:08:4b:92:21:73:e5:9b:e1:13:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:ea:c0:1e:d4:1f:3f:50:0d:dd:34:65:43:
4a:2b:9e:81:60:95:99:c1:b9:63:01:bc:69:09:d9:
02:10:d2:26:ff:55:62:d5:a8:fd:18:66:8e:0e:5d:
05:eb:cc:dc:45:2c:cb:3e:ca:57:c6:1a:0a:f2:bf:
1a:0e:22:c3:25:c0:d9:67:10:0b:a9:11:7d:98:86:
09:a5:d7:99:88:bf:35:f4:0c:74:ed:73:ed:10:fa:
b3:bf:bc:64:db:9e:68:15:84:c7:a4:86:de:75:b3:
c2:47:77:c1:59:35:a4:a8:98:da:21:7e:65:bd:64:
b2:d9:e7:48:15:9b:f2:1f:98:a7:19:e6:ac:bb:82:
43:9d:ca:c3:8b:2b:ed:72:26:9f:45:a1:e6:d5:4c:
52:6f:fc:1b:e6:01:d7:65:9b:d3:65:42:08:3b:7c:
67:63:cf:09:ec:6f:c5:71:9f:d9:54:34:16:bb:ca:
5c:f3:98:fd:6e:cb:4f:02:38:77:4a:7b:7e:1c:fc:
d5:c5:ec:9c:ec:14:10:ab:9f:ea:dd:dc:8d:62:c8:
56:ba:38:d6:03:c7:c7:71:f3:e4:9a:be:b5:b8:0e:
31:bd:21:ee:aa:6c:05:60:37:4d:65:b9:d2:18:d0:
a2:75:85:5e:b9:98:5a:a9:48:60:2c:a4:bc:31:17:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.128.0/21
87.238.144.0/21
185.186.72.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39271
Signature Algorithm: sha256WithRSAEncryption
4c:92:1a:2d:4b:f8:de:d0:2f:4b:ee:84:7b:02:f9:fd:63:0b:
ca:7e:28:94:29:57:22:b4:a4:4d:36:3f:0b:70:27:65:89:2b:
c8:38:5f:40:f6:7d:f0:7f:6d:82:2b:5a:0e:a3:cd:dd:24:7a:
53:68:f1:36:9d:b7:44:70:6a:98:d2:33:38:29:2a:a2:87:c5:
32:06:e5:1f:1a:e3:d2:08:99:41:cc:c5:b0:78:7b:a3:9a:5f:
d4:c3:09:ec:99:cb:ab:89:e9:f8:6f:39:95:4b:f1:ec:7b:1d:
92:c2:ce:94:90:60:de:11:39:8c:80:79:59:00:33:e5:03:f0:
05:9d:b3:f2:9b:04:5a:6f:79:f0:92:39:42:5f:39:6a:06:70:
4b:86:e3:08:85:09:5c:98:ff:06:e6:10:63:92:b8:77:18:00:
7b:8e:54:81:83:72:eb:40:35:80:64:63:2d:f4:a2:a4:43:03:
e1:ca:f3:a2:df:4b:ec:df:2c:d5:3e:1b:2e:12:b8:9a:dd:43:
97:a4:7f:c0:46:5a:6d:49:48:49:12:f8:cb:42:0d:3c:cb:c4:
d8:e7:f9:36:51:fe:d3:4f:08:e2:df:7b:40:32:58:6f:2f:b7:
b0:46:61:52:00:64:19:a0:40:53:f5:38:53:4e:e0:24:54:c7:
9f:a8:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:10 2025 by rpki-client