Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sIRyULOncSfffDx7je-MnZGdxLk.cer
File: sIRyULOncSfffDx7je-MnZGdxLk.cer (raw, json)
Hash identifier: nbeHnDhDxRgK/lq7csBVyHYx6SBEulnwZeCZexiTVe8=
Subject key identifier: B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BE48B393AD5AE62E1547A306B49FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60823
IP: 92.243.70.0/24
IP: 92.243.92.0/24
IP: 185.25.124.0/22
IP: 195.191.254.0/23
IP: 2a04:3180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e4:8b:39:3a:d5:ae:62:e1:54:7a:30:6b:49:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0847250b3a77127df7c3c7b8def8c9d919dc4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:59:ed:31:7a:69:e3:d6:04:21:b1:69:79:ee:
24:07:a0:49:5a:38:c8:43:98:95:8d:25:6e:39:2a:
5a:64:6e:ab:e8:dc:33:97:f1:47:f0:17:34:d3:ac:
61:a6:3d:be:40:70:7f:e9:45:66:53:7a:8b:84:72:
9e:6b:ea:f0:28:22:77:8e:74:a1:df:5a:b3:b9:54:
1b:56:70:d4:f3:f3:20:c6:e9:96:9a:84:3d:61:52:
18:c7:19:c3:33:3e:cf:c8:fd:cf:5a:2f:3f:8d:69:
0d:f0:fd:7b:f2:17:3e:15:50:65:c0:87:5a:90:58:
b4:28:82:41:75:c4:aa:2a:ab:38:12:8c:95:ee:8f:
c6:6e:57:22:2f:86:84:cc:85:f1:ce:a7:f5:3f:38:
d3:5a:8f:f0:a0:5d:0a:00:15:88:b9:a7:32:69:04:
35:06:bb:b3:d5:20:9c:b2:89:0d:e7:11:19:ec:a1:
5c:d5:51:f2:1d:f0:ce:e7:e8:d5:1e:30:f6:26:4c:
ef:f9:91:96:f2:09:c7:7e:e5:a1:57:78:89:7b:10:
35:25:8b:eb:78:fe:37:87:c4:ca:c1:c5:42:13:0d:
2c:04:6a:8f:d8:69:95:cb:f4:3b:79:28:d9:62:b7:
24:37:d2:36:ea:1f:0a:82:df:5e:13:e0:a6:95:68:
e6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:84:72:50:B3:A7:71:27:DF:7C:3C:7B:8D:EF:8C:9D:91:9D:C4:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/178ffd-a99c-4333-8e9b-ca35469553cf/1/sIRyULOncSfffDx7je-MnZGdxLk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.243.70.0/24
92.243.92.0/24
185.25.124.0/22
195.191.254.0/23
IPv6:
2a04:3180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60823
Signature Algorithm: sha256WithRSAEncryption
01:5b:02:ac:9b:ef:53:25:c7:0c:e1:68:e3:e5:30:b1:8c:37:
5d:43:68:fd:b0:63:2b:9c:71:74:e5:40:09:65:33:d0:bd:7d:
7b:bc:15:12:ee:62:2a:9d:2f:4d:b7:4a:24:bf:50:bf:5b:a2:
18:9b:02:84:86:0d:0e:32:fe:6c:a0:a3:11:48:97:d7:93:f7:
23:86:91:81:a8:0a:7b:23:04:d5:cd:9e:c8:79:d8:dc:81:f9:
14:4a:20:36:25:4d:6e:10:45:05:79:43:dd:e7:cb:80:03:f9:
59:5d:6e:b7:ab:9a:3b:c6:fc:73:c0:66:03:2b:56:0e:9c:2d:
1f:ce:69:d5:e9:2a:0c:e5:e4:49:bc:29:fc:d3:54:86:bd:11:
4e:6a:35:98:98:f0:dd:8c:08:f6:fc:54:5e:af:99:f3:66:76:
de:c7:df:ad:60:55:25:40:44:18:3f:2c:54:11:18:94:54:86:
27:47:92:96:ca:cd:33:62:ab:02:b8:2e:9c:f8:d2:e2:d1:d1:
d6:b7:d9:77:19:26:91:39:a8:5d:b7:49:ae:aa:73:77:30:58:
21:85:96:cb:ae:00:11:83:b5:53:68:27:1d:c9:dc:f3:10:a6:
fc:15:86:ab:27:00:96:39:70:d0:60:c2:fa:76:20:d8:06:4a:
39:58:d1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:39 2025 by rpki-client