Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer
File: u9ky9wZLH96aEiXzMnefwi5nMjk.cer (raw, json)
Hash identifier: sBTaR0fR9elwWqls4wv5uZKqpqAa5+cDt01GZ116WNA=
Subject key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5356F5D2706CB61A5189735CCB64C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12605
IP: 81.10.128.0/17
IP: 86.56.128.0/17
IP: 90.146.0.0/16
IP: 185.196.156.0/22
IP: 212.33.32.0/19
IP: 212.241.64.0/18
IP: 2a00:cf8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:35:6f:5d:27:06:cb:61:a5:18:97:35:cc:b6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbd932f7064b1fde9a1225f332779fc22e673239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e9:9c:c3:4a:59:5b:1a:44:8d:7e:42:af:aa:
60:3b:04:32:b5:82:de:66:92:70:47:40:b9:83:d6:
67:1c:e7:70:dc:6e:15:2f:2c:d4:19:d3:e0:15:4c:
de:e0:78:8d:de:03:9c:5b:3d:ab:8b:2b:65:9e:8f:
a1:aa:7b:7c:ae:83:e9:34:fd:3c:ee:44:0c:1f:3a:
5e:1d:45:d1:65:72:eb:74:61:cc:b2:03:15:5a:ff:
95:10:2f:19:05:6c:0c:99:58:fc:2f:07:27:b6:ce:
33:a5:c0:69:1e:de:06:e3:ad:b7:0c:46:90:41:6d:
ed:83:10:15:30:a4:17:e4:c1:7d:f0:8a:a9:e1:ce:
46:3b:61:e4:8c:03:69:14:50:05:d2:91:12:43:72:
67:52:5c:8a:c3:e8:df:da:2b:fc:04:e5:e9:5f:f6:
e2:71:e0:6e:1f:ec:30:56:29:c2:56:0e:24:ff:73:
e3:9f:d6:78:4c:e4:44:4e:35:04:52:15:a8:81:a9:
02:c0:48:be:ad:ce:4f:7c:41:b6:2a:d7:38:f6:a7:
e1:1b:f6:cc:9a:bc:d1:86:82:82:35:7d:a8:f1:4e:
3b:4d:9d:1d:65:83:8b:52:f0:20:e4:98:1d:df:bd:
bc:55:53:f4:1a:b6:9e:d8:7b:b9:fa:e1:92:41:0c:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.10.128.0/17
86.56.128.0/17
90.146.0.0/16
185.196.156.0/22
212.33.32.0/19
212.241.64.0/18
IPv6:
2a00:cf8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12605
Signature Algorithm: sha256WithRSAEncryption
74:b9:bf:ab:a7:fa:80:e3:48:18:35:6d:5b:38:0d:67:6f:01:
7c:f4:60:73:20:b9:25:66:65:6b:ae:05:95:c3:d7:1d:bf:e7:
f8:0e:b6:85:e0:53:e5:74:2d:55:71:6b:ff:83:1d:bb:d6:5b:
19:4c:4d:e3:18:9a:d4:32:ec:c5:1c:ce:f1:14:c7:f4:72:54:
63:2c:65:71:ed:f3:eb:d2:4f:ff:ed:93:b8:be:0c:02:8d:8d:
d1:29:b2:d7:af:5a:cf:7c:48:b6:38:c8:58:4e:9f:19:9e:d3:
d7:b7:21:a5:b0:d2:b5:60:83:3e:eb:27:f7:64:29:2a:bf:39:
19:f0:92:5f:b0:9c:b6:45:f5:53:af:5a:3b:e7:05:06:0a:b7:
f6:e1:e9:0f:3c:b4:cd:c4:7d:85:a2:94:1a:06:1f:1f:44:35:
81:a4:cb:69:93:9f:bc:a0:0c:25:50:1c:f3:d3:c9:6e:c7:9f:
be:c8:68:8e:80:87:7c:53:17:5b:c9:ff:4f:27:0b:a3:11:3b:
c1:1d:a9:85:53:84:56:05:aa:5e:8e:ef:2a:27:7b:46:9f:08:
43:02:89:d0:fd:eb:9c:f5:2b:eb:70:a1:34:f3:45:63:2a:25:
1d:a8:58:77:bd:6d:17:06:d0:4c:c0:51:18:ec:6f:45:14:8e:
a2:c3:13:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:46:16 2025 by rpki-client