Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer
File: lugqtki4s_iFdWnDmvlUSt_BfAE.cer (raw, json)
Hash identifier: ojiEnk4ZzA/IT4Q58Xr1Is/F3efOQ4X1d9/tfuoFbNA=
Subject key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424451EBF532312F934873FA3999B4D94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 9103
AS: 13065
IP: 89.28.224.0/21
IP: 185.9.56.0/22
IP: 212.109.128.0/19
IP: 2a00:6c40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:1e:bf:53:23:12:f9:34:87:3f:a3:99:9b:4d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96e82ab648b8b3f8857569c39af9544adfc17c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f3:3a:1a:df:21:1c:a9:66:f1:63:30:dd:b4:
b3:c6:f3:f8:b2:e8:d7:71:a5:51:9d:fa:f6:2f:36:
5c:57:13:f1:03:af:46:55:09:5a:ae:50:33:b7:c9:
36:5c:99:a4:9e:94:ea:66:dd:fb:a0:6a:c4:11:9e:
61:44:b5:af:25:98:57:81:1e:54:95:dc:d7:ff:cd:
a3:9f:87:5a:57:8c:d6:7a:6b:35:41:bd:eb:0e:63:
59:ff:d3:75:4a:55:e3:66:a7:34:43:a3:97:d3:42:
2c:bb:de:65:ba:2b:01:45:e2:fb:9a:0e:c9:d4:43:
00:03:ad:77:46:b8:f8:cc:0c:b6:aa:09:b9:04:b8:
96:e5:47:70:9c:78:86:c0:7b:cf:7b:ef:b0:85:bd:
a3:98:d6:dd:db:48:3f:95:a7:0e:2a:29:2b:e0:aa:
39:2c:a6:c6:d8:fc:0d:59:95:70:3d:37:37:e5:e1:
0a:61:ef:ab:d4:b9:11:a8:d8:b5:6a:c4:ac:9c:8c:
d6:bf:31:42:66:5d:97:5f:b7:dc:73:56:36:7d:d9:
ed:9e:a6:35:21:9e:21:61:50:51:3e:32:0b:20:b7:
7a:ba:75:85:7f:cd:46:cc:30:27:23:ae:17:7e:ee:
07:b2:e0:18:de:4f:de:ce:31:cf:de:d8:87:e3:17:
ef:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.224.0/21
185.9.56.0/22
212.109.128.0/19
IPv6:
2a00:6c40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9103
13065
Signature Algorithm: sha256WithRSAEncryption
9f:e7:95:dc:8b:34:4d:81:95:e5:fb:63:4e:9d:3e:a6:88:30:
be:89:70:f8:b7:c8:23:82:94:b6:af:a7:0f:cb:3e:de:ad:9a:
2d:36:7b:54:b9:fd:75:0c:5a:38:fb:57:42:4d:2e:71:6a:df:
ed:de:3e:1b:b5:0b:8b:f7:c8:73:69:33:f4:03:1d:32:a2:ca:
49:03:c4:96:f5:2c:69:6e:62:36:39:0b:de:9d:18:bc:84:b4:
85:b8:10:02:12:6e:d6:80:88:eb:e7:1f:c6:5f:08:1b:a1:4c:
1d:bc:c8:df:51:6f:71:23:79:1a:0e:a2:3b:af:67:9a:28:4f:
f7:2c:38:02:8d:13:41:70:01:33:9e:c4:4d:ad:bb:ca:ea:52:
03:e7:70:b5:7f:57:fa:55:8a:41:41:28:28:49:59:42:3c:41:
1b:70:04:68:70:fb:fc:fc:e5:f7:82:74:98:8d:17:f1:ff:a2:
ad:c0:e5:36:9e:45:66:ab:fc:dd:5f:14:5d:9a:8b:60:72:8e:
51:f1:f0:2d:63:56:06:1c:1f:8d:13:16:5f:23:38:b8:25:17:
25:b1:75:f8:4a:cb:68:95:48:13:51:cd:98:9b:9f:f0:a4:82:
c0:e4:c7:3d:94:49:2e:a7:4b:4b:25:3b:b4:c5:a1:b6:34:43:
eb:fd:5c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:32:37 2025 by rpki-client