Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u3dSpxm3QKDgJE3SnGUy95FRZGs.cer
File: u3dSpxm3QKDgJE3SnGUy95FRZGs.cer (raw, json)
Hash identifier: pE0oHyDYSA4a8wqz3VFsEpFiLE6C0o/dArtU/Iwr4As=
Subject key identifier: BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196ED9BD7D910B722F9919494B24F198982
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 12:12:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197025
IP: 178.212.48.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:9b:d7:d9:10:b7:22:f9:91:94:94:b2:4f:19:89:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 12:12:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb7752a719b740a0e0244dd29c6532f79151646b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6e:5a:81:5d:42:b8:28:d1:2f:d7:d1:d5:84:
e9:20:fb:74:04:6a:29:25:c1:e6:34:25:65:dc:31:
35:08:7f:33:c4:02:d2:3b:21:8f:ee:df:7b:89:d5:
6d:ec:2b:f1:ff:2a:a8:b6:28:a6:66:7d:89:ed:5a:
5c:e1:a7:15:d9:bb:7e:3e:48:ae:72:72:b9:23:f1:
c7:3a:a8:9a:d2:98:15:1b:bf:9b:dd:f6:52:90:30:
a8:a4:0a:b5:b8:1b:2d:72:74:42:23:e2:b7:d4:18:
64:8e:f4:10:53:29:12:88:43:d1:e9:ea:4a:d9:73:
f7:02:05:d5:b4:82:57:db:26:fe:85:87:f2:34:86:
de:0f:67:4a:2d:74:85:e8:a4:0c:52:66:e8:ee:ae:
8a:e4:3f:8a:79:a1:3f:e2:38:3a:09:f6:0d:bf:3c:
92:47:20:9e:06:c8:8c:34:58:9a:51:43:fc:da:f1:
1c:aa:59:fb:d4:64:67:50:5a:82:20:ea:fa:dd:71:
d7:75:09:b7:8f:85:8a:6b:45:4a:ef:05:87:d8:27:
90:c8:cc:38:66:ba:9e:bd:c2:66:47:a7:56:6a:14:
a7:0a:98:ac:5c:95:9b:36:61:ae:8b:84:8b:2a:dd:
01:69:62:60:e0:58:f9:29:3b:2d:b6:9d:ac:c5:ac:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:77:52:A7:19:B7:40:A0:E0:24:4D:D2:9C:65:32:F7:91:51:64:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/3c32b5-c0c8-436a-9ad6-3354adba11b1/1/u3dSpxm3QKDgJE3SnGUy95FRZGs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.48.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197025
Signature Algorithm: sha256WithRSAEncryption
00:7a:19:72:84:90:8a:ea:6d:44:eb:04:50:fb:c4:d9:c8:00:
5d:e1:f1:68:51:a6:ec:91:0a:7e:24:36:06:77:27:46:59:96:
7e:5d:f8:2b:26:77:62:f6:4d:95:14:19:ea:34:8d:44:e9:4e:
57:ae:ab:ad:75:88:d2:41:36:f5:43:a0:7d:df:f7:a8:70:6f:
66:c9:2c:83:f0:85:b5:75:43:4c:d8:90:bb:99:92:ca:4e:9c:
6c:8d:d9:46:6b:fe:ca:80:07:6b:e2:27:b0:76:65:a2:7b:6c:
93:80:35:84:d8:5a:bd:07:1a:05:5e:d3:d7:e2:2d:46:6f:53:
dd:de:25:79:78:0b:a1:53:be:b1:3b:9c:be:56:9c:ce:0f:bb:
db:7e:a5:9c:0b:f4:75:da:8f:34:9e:9a:ec:b3:97:55:5c:6a:
bd:04:c1:7e:7c:e5:b6:19:e9:e2:8a:e0:a9:8b:85:6a:12:d7:
73:ec:96:d0:8a:f6:12:f2:85:ce:f8:35:71:50:d5:18:6f:e3:
9c:89:8c:24:ee:50:7e:97:73:02:39:dc:a9:0b:21:4f:e2:32:
91:27:3a:62:44:d4:fb:72:98:75:39:be:6c:a2:0f:db:5a:b0:
00:06:ed:87:fd:ea:c1:f5:fd:f4:17:bb:2c:89:1e:cf:44:df:
32:99:d4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 11:58:25 2025 by rpki-client