Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer
File: rLg4XQhXCAz8ATqlIb3mo6k-SBI.cer (raw, json)
Hash identifier: XTI3eC3JjnESTGeB2NWqTEa1a/Im/PqxRdJlHeuO4Ic=
Subject key identifier: AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D96A7246C6ABB2313073F08B9D5CBE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51266
IP: 91.216.242.0/24
IP: 193.160.98.0/23
IP: 194.147.171.0/24
IP: 2001:67c:264::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6a:72:46:c6:ab:b2:31:30:73:f0:8b:9d:5c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acb8385d0857080cfc013aa521bde6a3a93e4812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b9:f3:dd:99:b2:e5:5c:d9:81:a3:67:39:41:
6b:8a:a9:a3:75:d0:1d:2b:c9:0c:a2:c5:43:1e:c7:
20:f7:e6:2a:4e:c7:4f:66:39:7f:89:e2:ff:41:70:
04:3f:9c:22:60:c5:e8:81:0e:48:32:ed:ef:c7:03:
98:de:aa:20:f4:2e:3c:c5:af:36:3b:a9:5d:4c:30:
f9:fa:1b:44:69:b4:e8:71:93:5c:97:8d:1b:6b:a4:
2a:51:4c:67:76:6d:4f:fd:89:e7:81:21:94:84:0f:
50:cf:6b:99:00:6a:a3:73:90:d5:59:39:1c:93:f9:
b9:c6:50:46:dc:ed:a8:59:fb:11:35:c3:5d:d4:ae:
90:4f:45:ea:99:97:25:bc:50:18:a3:e6:b9:ec:c4:
c6:d6:b1:2d:15:d3:21:15:97:47:9c:c5:be:cd:ee:
32:89:a7:98:f8:56:ec:f8:76:7f:73:c5:5d:ef:e1:
6c:b7:7b:10:8e:65:61:35:90:91:68:16:ec:7b:58:
11:2e:45:11:05:71:1c:40:6f:24:a6:56:44:1b:5e:
32:05:46:c8:85:4b:cf:76:45:30:e5:43:42:80:85:
72:16:7e:e6:42:ce:90:ee:a7:e4:86:a8:42:41:aa:
8e:81:fe:fb:8f:25:37:c3:b8:99:33:5d:f5:05:b2:
3d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B8:38:5D:08:57:08:0C:FC:01:3A:A5:21:BD:E6:A3:A9:3E:48:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2aa44d-3bf3-420b-ae3e-e8a6a14419d9/1/rLg4XQhXCAz8ATqlIb3mo6k-SBI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.242.0/24
193.160.98.0/23
194.147.171.0/24
IPv6:
2001:67c:264::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51266
Signature Algorithm: sha256WithRSAEncryption
2a:04:dd:98:22:f9:e6:78:c0:96:d3:75:ce:d2:af:de:38:99:
ee:35:66:b8:12:b5:6c:96:cd:71:41:e6:3f:45:dc:1c:fe:ae:
d4:45:52:1d:2f:0e:40:e9:68:aa:ea:43:95:0b:06:14:22:81:
59:89:8c:8c:00:b0:d0:ca:05:8d:ec:4a:8b:93:c7:a4:84:f9:
63:52:c7:07:b9:bc:41:71:35:09:09:aa:7b:df:38:85:92:40:
e6:f8:1a:51:d5:c8:76:dc:ee:52:30:82:47:f6:b3:0f:df:7f:
cc:7b:a8:7f:78:67:9e:82:ac:09:13:ec:b6:ef:1b:4c:a5:ca:
00:31:eb:74:c2:11:3d:b3:e9:55:ca:4e:16:2d:f1:4b:42:6e:
96:09:18:3d:3d:5b:10:51:72:e3:f3:9c:5f:26:9e:c1:21:af:
d4:a8:0d:f9:30:9f:2d:2a:93:dd:49:04:73:17:ac:21:56:45:
f7:a6:20:c0:d5:56:84:aa:8e:52:72:43:53:ea:d3:25:3a:51:
51:b1:48:04:14:76:50:c6:ee:7d:1b:51:7b:76:a1:c7:96:94:
a7:29:52:e8:5e:5c:74:46:bd:35:d5:32:56:46:f0:5b:0b:31:
da:a5:c9:73:b9:ef:df:be:97:68:2b:e3:5d:eb:01:34:b0:bb:
53:86:4f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:55:30 2025 by rpki-client