Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
File: t4SM0jk8F4NlegV3erMV45jrsj8.cer (raw, json)
Hash identifier: 6Blj2ufNdtkqRm2OKjyY8wmdu5QI0le9bDC6oDYRnxs=
Subject key identifier: B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B3E199EDDE78772A51226327DB761
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29559
IP: 195.177.208.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:3e:19:9e:dd:e7:87:72:a5:12:26:32:7d:b7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b7848cd2393c1783657a05777ab315e398ebb23f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:5e:bf:47:5e:8d:3c:97:69:ba:cc:6b:5c:
b3:c6:7a:ac:a1:2d:2a:16:2c:0e:58:2b:3a:19:6b:
dc:84:94:f7:21:a9:eb:c7:6a:f4:c6:17:5a:3b:f3:
57:48:78:07:3e:92:9b:f8:40:c3:01:ca:26:9c:94:
46:06:e6:a4:ad:1c:bd:1a:7a:95:9d:d2:58:13:cf:
b9:6d:19:de:45:d0:d5:8e:74:34:5e:86:28:40:99:
28:b4:c2:af:f6:85:0b:75:8f:cf:1c:dc:d9:fb:ce:
03:30:04:4c:c7:10:e4:f9:50:f4:03:ba:39:5c:18:
47:76:f3:7b:97:66:a0:ca:08:34:4f:34:fc:7d:96:
d0:cf:02:a9:1a:24:4e:2f:94:e8:64:6a:33:44:96:
c8:5f:71:5a:19:7a:6d:c1:49:96:ca:ad:f7:3a:14:
aa:f4:4f:52:32:77:28:9a:f2:49:58:9f:55:61:54:
5c:c4:1d:58:b6:84:ac:6e:dc:67:00:58:44:24:f9:
af:84:dd:83:50:2b:02:5c:fc:2b:dd:30:c2:c2:66:
c6:4c:be:79:45:45:c0:42:5f:75:e5:65:1f:44:5e:
b8:c5:f1:eb:c8:32:1d:cc:b7:17:14:df:1d:2b:ae:
33:db:dd:14:65:70:79:35:04:29:f0:92:69:cc:86:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.208.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29559
Signature Algorithm: sha256WithRSAEncryption
00:85:50:68:fc:cd:2b:ed:df:1c:ff:42:91:0a:7d:3f:90:8b:
6d:96:98:ac:93:f6:b9:8e:e0:03:4a:8d:ed:76:c4:38:f1:bc:
1f:36:4a:02:2b:dd:11:c1:a6:d8:86:5d:96:f2:bf:21:92:f3:
70:f1:d3:40:b9:66:e2:02:c0:8b:39:56:05:2c:37:00:5d:ee:
5b:1c:e6:25:4f:18:36:a2:f5:44:98:73:ec:b8:48:8b:29:fa:
41:47:ef:ee:2d:56:ac:cd:04:c0:42:7d:77:d0:1d:75:2e:b5:
08:89:14:cd:3c:fe:6f:30:c6:7b:cf:93:67:e1:be:62:62:0c:
3c:2c:93:3c:f4:8e:ab:92:3f:ad:a3:ae:6e:8a:48:3a:99:d9:
36:99:d0:8e:12:01:df:c7:13:20:bf:0e:bd:b6:a1:27:60:3f:
48:ad:9f:a2:87:8a:e8:5b:f4:d8:0e:5e:3f:ad:9b:75:67:91:
fb:2d:2d:ba:41:22:7d:e8:80:87:69:99:d1:13:a5:86:ff:b9:
b4:55:c3:c9:4f:09:e8:8a:78:b3:1f:7f:1d:9d:56:79:4e:f5:
88:45:9a:7c:74:c0:d5:9d:10:33:43:40:26:4d:52:ec:31:da:
d5:e9:20:60:e3:1c:fd:aa:ac:88:4c:59:4d:af:fd:41:61:98:
45:dc:f5:25
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAZQmaz4Znt3nh3KlEiYyfbdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzg0OGNkMjM5M2MxNzgzNjU3YTA1Nzc3YWIzMTVlMzk4ZWJiMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dtev0dejTyXabrMa1yzxnqsoS0q
FiwOWCs6GWvchJT3Ianrx2r0xhdaO/NXSHgHPpKb+EDDAcomnJRGBuakrRy9GnqV
ndJYE8+5bRneRdDVjnQ0XoYoQJkotMKv9oULdY/PHNzZ+84DMARMxxDk+VD0A7o5
XBhHdvN7l2agygg0TzT8fZbQzwKpGiROL5ToZGozRJbIX3FaGXptwUmWyq33OhSq
9E9SMncomvJJWJ9VYVRcxB1YtoSsbtxnAFhEJPmvhN2DUCsCXPwr3TDCwmbGTL55
RUXAQl915WUfRF64xfHryDIdzLcXFN8dK64z290UZXB5NQQp8JJpzIamUQIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFLeEjNI5PBeDZXoFd3qzFeOY67I/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk3LzhiNWRi
Zi00NThkLTQzMjYtOTMwMi01YWFhYzJjYjBkZjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTcvOGI1ZGJm
LTQ1OGQtNDMyNi05MzAyLTVhYWFjMmNiMGRmMS8xL3Q0U00wams4RjRObGVnVjNl
ck1WNDVqcnNqOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBw7HQMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AnN3MA0GCSqGSIb3DQEBCwUAA4IBAQAAhVBo/M0r7d8c/0KRCn0/kIttlpisk/a5
juADSo3tdsQ48bwfNkoCK90RwabYhl2W8r8hkvNw8dNAuWbiAsCLOVYFLDcAXe5b
HOYlTxg2ovVEmHPsuEiLKfpBR+/uLVaszQTAQn130B11LrUIiRTNPP5vMMZ7z5Nn
4b5iYgw8LJM89I6rkj+to65uikg6mdk2mdCOEgHfxxMgvw69tqEnYD9IrZ+ih4ro
W/TYDl4/rZt1Z5H7LS26QSJ96ICHaZnRE6WG/7m0VcPJTwnoinizH38dnVZ5TvWI
RZp8dMDVnRAzQ0AmTVLsMdrV6SBg4xz9qqyITFlNr/1BYZhF3PUl
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:42:50 2025 by rpki-client