Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer (raw, json)
Hash identifier: euCROhaDa5bYCFgw8t1yA1qj/USwKXsmxy3L4/PdDuM=
Subject key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019469E7A0F5EBAAD87CDDF92CFCC6D4AB5A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Jan 2025 12:19:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20648
IP: 62.164.181.0/24
IP: 62.164.185.0/24
IP: 194.46.42.0/24
IP: 194.46.47.0/24
IP: 194.164.218.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:69:e7:a0:f5:eb:aa:d8:7c:dd:f9:2c:fc:c6:d4:ab:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 15 12:19:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f2:0c:86:ae:f1:c2:35:e4:13:31:94:0f:24:
14:a0:aa:74:b1:7f:53:fe:40:19:d4:3e:c0:6a:4c:
a7:b0:23:21:aa:cb:ef:9b:20:c8:8a:7b:9e:5c:21:
ce:5d:02:30:56:77:82:52:39:b3:39:41:9b:5d:9c:
a2:da:61:3c:d0:15:fe:56:63:32:97:ac:be:0e:73:
38:e8:7f:76:be:0a:24:28:37:50:7b:f0:a1:f3:2d:
f1:6d:8a:50:30:d9:7c:9c:5f:fb:35:f3:3a:8a:cc:
bb:0f:d1:b7:d9:0d:3b:2d:94:ff:2a:cd:5d:53:d1:
fb:37:d1:c8:dc:fc:44:74:3d:41:85:8c:d1:2e:50:
14:e4:13:c7:31:b7:8c:f0:4a:60:25:fe:13:53:31:
45:bc:b6:d7:7b:54:d3:54:a2:ef:85:ea:2e:f1:3d:
03:63:2a:90:0c:e4:25:23:e1:79:11:6b:7e:4b:79:
f9:16:8a:24:15:72:83:2f:7a:d5:7a:22:38:6a:dc:
ff:3e:12:04:3d:1f:fe:07:05:1a:bc:67:1f:42:6c:
23:33:b6:60:d1:ad:6d:9b:74:53:a7:48:65:f6:2a:
55:25:19:53:45:25:2d:15:35:38:5e:ba:a5:a4:e3:
8b:59:a5:df:43:8f:7d:f7:71:c8:65:20:81:96:fb:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.164.181.0/24
62.164.185.0/24
194.46.42.0/24
194.46.47.0/24
194.164.218.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20648
Signature Algorithm: sha256WithRSAEncryption
94:82:d1:0d:22:6c:38:8f:08:cf:7e:9c:a1:7a:37:c2:d0:e0:
58:95:96:ae:1f:7c:bc:4a:f4:f1:c9:b8:84:82:f9:1a:7e:ce:
2a:9a:cd:68:0a:36:19:48:39:6d:69:25:d8:78:ae:6b:2c:25:
87:40:c8:a2:4e:97:ac:0c:52:93:a1:74:14:4e:b8:b9:45:a2:
e8:7e:70:e7:e0:a8:7f:03:f5:1d:21:b8:d4:6f:b2:9d:7d:38:
09:16:06:7c:c2:53:7e:ea:c4:6e:41:a9:18:11:15:e5:e9:a5:
7b:0b:f2:86:23:48:28:c6:ba:5a:24:6e:5a:23:6d:6c:2b:c2:
89:1f:ba:92:32:d7:3f:f7:35:c7:78:72:a0:cc:86:c7:ff:f6:
70:26:fb:e8:6e:70:ff:53:f0:58:d1:24:50:87:0c:ef:66:3d:
96:b7:dd:7d:30:09:5b:d0:cf:76:c2:0d:6b:5c:58:8f:b2:6b:
83:ff:46:a9:ec:e5:a4:36:9a:ea:78:33:76:e2:fa:95:93:e8:
1d:0e:3e:c2:cc:cb:a9:54:1d:7d:5f:81:06:20:79:59:b7:21:
aa:37:54:11:fc:30:a1:13:6a:0d:c5:2f:60:3e:69:ce:43:50:
fa:12:01:c6:38:14:4c:b4:9c:71:28:b8:67:07:fe:83:0c:47:
fe:df:aa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:05 2025 by rpki-client