Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pu1EK5HU6Dpt45-2eXGh55xrHtU.cer
File: pu1EK5HU6Dpt45-2eXGh55xrHtU.cer (raw, json)
Hash identifier: O5ZlXidaCgxEjVNR5MMKpkIDRxsjsqvPuXjt7zj7pt8=
Subject key identifier: A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421444DA217F766E9E03C9CE493202A53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207636
IP: 91.208.162.0/24
IP: 91.208.184.0/24
IP: 91.208.197.0/24
IP: 91.208.206.0/24
IP: 2a0f:5f40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4d:a2:17:f7:66:e9:e0:3c:9c:e4:93:20:2a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6ed442b91d4e83a6de39fb67971a1e79c6b1ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:1c:50:e7:c7:5e:27:9a:1f:69:c2:01:e4:
a7:f8:1e:c8:ea:34:08:d7:b4:51:d7:dd:25:f2:11:
fe:84:48:0b:91:9c:e3:4d:11:ae:2d:ef:be:d4:18:
11:6e:55:00:29:63:0c:d3:88:76:a5:ac:c5:f8:e8:
b3:60:9f:ef:1e:46:14:51:73:ec:1b:15:48:f8:a8:
07:fb:d4:ac:80:27:a6:71:d5:23:71:31:96:09:70:
29:27:21:9d:08:e7:d4:8d:28:77:16:72:d6:08:7a:
bc:42:98:e4:46:2d:bc:40:57:8b:2d:55:fe:dc:b9:
71:5b:dc:3f:08:cb:54:77:53:3b:ee:59:87:72:47:
9e:a5:05:dd:45:db:73:5f:69:93:f4:45:1a:34:07:
ab:e7:8f:60:f6:ac:5f:0b:f6:0f:b0:35:58:f3:c8:
5e:23:6e:5e:78:14:a4:89:8c:94:24:fc:c9:bd:a8:
26:18:e6:a8:fa:75:50:26:75:11:e8:51:fb:3a:75:
40:cc:1a:c5:74:da:99:bd:b0:f9:97:59:df:b9:9e:
10:1e:19:fd:4d:34:8d:9d:3a:3a:ed:89:30:17:82:
41:ec:92:2a:bb:b7:02:7b:d6:73:0f:c1:0c:ad:99:
f7:e0:c0:4d:1c:4b:76:5c:9e:66:85:07:52:f3:49:
46:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:ED:44:2B:91:D4:E8:3A:6D:E3:9F:B6:79:71:A1:E7:9C:6B:1E:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/553dc6-12d0-4d4a-a294-97c5d59b0bbf/1/pu1EK5HU6Dpt45-2eXGh55xrHtU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.162.0/24
91.208.184.0/24
91.208.197.0/24
91.208.206.0/24
IPv6:
2a0f:5f40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207636
Signature Algorithm: sha256WithRSAEncryption
0d:bc:f8:10:2d:e3:bc:e4:f6:d4:61:8c:61:20:2d:8f:b4:02:
3f:ba:2c:6a:8d:55:4b:bf:16:ae:b3:ba:67:d0:15:43:34:4b:
f6:3f:9b:13:8b:48:78:b6:3b:92:3e:bf:0e:8b:58:71:3e:d7:
46:8f:0e:50:cd:93:4b:1d:d6:ea:0b:7c:ae:cf:ff:60:29:1c:
16:db:4e:27:e4:c6:b9:b7:f4:0e:76:53:37:72:97:7e:da:b2:
41:f1:25:9a:5b:8d:9e:30:95:fc:af:22:93:4e:0d:b9:b8:88:
23:2a:0e:6f:40:0b:db:49:5e:d6:ee:05:56:dc:aa:a3:5c:a4:
58:15:11:5d:44:d4:1d:c1:57:63:5c:1e:1e:07:67:6c:5b:50:
8c:97:d3:1a:89:a6:a5:4b:88:3f:09:36:fa:ea:ab:f2:5e:4c:
65:d7:ce:2a:e2:72:d3:33:34:63:98:08:39:74:18:24:47:c5:
9e:e5:3a:f8:46:da:db:99:5a:ec:aa:8d:80:f9:bf:3f:72:9b:
8f:2c:eb:0d:3d:16:56:ea:88:09:ec:36:85:55:c2:cd:26:02:
04:4c:a2:7c:ed:31:a0:b5:72:c4:01:4b:28:87:89:70:00:d6:
84:df:e4:b4:29:31:97:1b:fa:37:c9:61:63:de:51:17:20:3b:
51:2d:78:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:57:44 2025 by rpki-client