Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sejPc4YgDf2psGfbnHfTBmDXTNo.cer
File: sejPc4YgDf2psGfbnHfTBmDXTNo.cer (raw, json)
Hash identifier: EiBZtgtRxHWslaVQrGAl7AjAh5RhvAa+F+H4GeqgE1k=
Subject key identifier: B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3FFD39DF997D7A90033D69864ABE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12384
IP: 77.235.224.0/19
IP: 185.173.196.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ff:d3:9d:f9:97:d7:a9:00:33:d6:98:64:ab:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1e8cf7386200dfda9b067db9c77d30660d74cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:41:73:81:4b:1e:27:fc:ec:27:5c:86:0c:bc:
7c:a4:71:bf:b5:09:bd:57:97:42:83:27:f6:1c:d8:
f7:95:20:6d:c7:72:5d:9f:59:84:5e:39:dd:76:65:
1a:2e:65:38:50:30:69:2a:e9:a8:da:4b:35:13:df:
d3:b2:3d:62:4f:bb:b9:bf:33:66:2c:c9:68:f2:97:
94:9f:46:89:21:26:3b:56:f1:b8:61:a8:86:93:13:
47:1e:22:cc:6c:b8:9f:b4:67:da:ad:28:77:d2:2a:
3d:8e:3c:29:ff:18:c0:52:21:87:98:07:16:6f:85:
1a:b7:99:a2:a8:19:6f:bc:1c:74:8d:c1:e0:c6:7f:
f3:d3:ac:be:03:01:f0:3d:34:47:33:a9:6c:43:98:
a9:49:54:71:a7:34:da:22:44:32:ce:d7:8f:1e:e6:
2d:4f:b0:68:29:a8:79:d6:73:d4:a3:18:d4:0e:c5:
bf:35:76:0c:7e:13:88:aa:97:38:52:1d:4b:37:2a:
ab:fc:70:95:d8:ee:d5:9c:3c:9e:3e:2f:f0:f2:79:
c9:d1:f6:2f:e4:d6:53:99:06:ea:3a:70:73:a5:c4:
26:3c:34:91:a1:ac:88:35:55:34:17:78:37:0f:f6:
45:97:88:71:6a:2e:55:32:7e:97:60:67:22:a9:2b:
7a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E8:CF:73:86:20:0D:FD:A9:B0:67:DB:9C:77:D3:06:60:D7:4C:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f499cd-fad6-4fb0-9be7-4a7904ffc8e1/1/sejPc4YgDf2psGfbnHfTBmDXTNo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.235.224.0/19
185.173.196.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12384
Signature Algorithm: sha256WithRSAEncryption
5c:9c:e3:61:f1:5f:d8:46:1d:62:63:51:0e:50:75:04:c3:33:
8d:d7:32:25:bc:4b:a5:52:7e:c3:5e:a2:1c:06:b1:89:9d:2d:
57:d7:e5:eb:1e:24:92:d9:65:7e:0c:dd:1e:31:62:2c:89:71:
c3:33:ca:38:a2:52:77:e5:96:ae:c9:e3:67:cd:f3:d2:3a:88:
f1:76:94:11:24:73:d4:74:f6:93:59:ca:7e:13:89:b8:fa:60:
10:cb:8c:80:34:29:cf:64:16:26:a0:5a:63:21:39:63:cf:63:
64:05:19:70:5a:3d:75:a5:60:90:17:1a:27:00:11:7c:2b:41:
f2:fb:76:28:31:19:77:d2:b8:b5:a6:e8:6d:fb:a3:81:79:bf:
02:f5:d1:ae:5d:0f:95:be:01:92:c9:9b:37:41:03:c0:77:8d:
30:20:a3:f4:13:cf:ec:a4:bd:7c:35:a0:49:6a:4f:38:e0:00:
b2:fd:f1:4b:82:89:88:1a:84:56:64:8f:ed:b8:5e:5d:e4:a2:
02:61:54:a8:28:03:ba:52:31:63:dd:25:22:2f:b9:b4:7a:99:
cc:74:3e:b5:d2:75:bc:82:27:49:f0:ac:68:2a:0a:da:45:6c:
18:d7:88:96:11:4e:04:fe:3a:a4:13:f4:03:f8:13:3c:8a:af:
86:b9:d6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:52:50 2025 by rpki-client