Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uBcWKHfan0Awu8uf6KwUPmqyhxs.cer
File: uBcWKHfan0Awu8uf6KwUPmqyhxs.cer (raw, json)
Hash identifier: O48rbMNwibDaVUXH+PvLXh8MdoQlrNfJhnsw4cdGs5c=
Subject key identifier: B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F360ACD00B9860BD33116DF4262BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 64484
IP: 45.145.164.0/22
IP: 62.3.33.0/24
IP: 146.19.168.0/24
IP: 193.3.190.0/24
IP: 2a0e:1e40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:36:0a:cd:00:b9:86:0b:d3:31:16:df:42:62:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b817162877da9f4030bbcb9fe8ac143e6ab2871b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fa:83:d9:e4:d7:5e:92:34:ba:e9:05:e5:29:
1f:a9:d7:cd:fd:d8:dd:66:cd:6e:68:5b:75:bd:3f:
5b:b7:d4:4a:ed:f7:84:79:94:eb:1c:5e:14:f2:e7:
a6:ed:28:fc:6c:c2:8e:f7:61:db:e1:2a:c0:16:71:
db:76:99:a5:6e:b7:63:de:3c:a0:7b:f7:d9:9c:cf:
99:91:cd:1c:58:15:eb:05:7b:1b:40:ec:37:7a:28:
bd:ee:dd:c4:6e:61:33:89:04:3c:0e:fa:0b:20:55:
19:5d:6c:9d:2d:ed:eb:f1:43:7b:d0:f4:65:22:ac:
7f:3c:90:49:91:63:e3:02:3a:03:4c:3b:a0:cf:46:
c9:de:5a:76:e0:d8:84:47:eb:9e:55:bd:cb:ba:1e:
40:a7:0b:7e:92:55:22:3f:d2:50:dc:05:53:a9:61:
c1:1a:2f:a5:ab:2f:2f:a5:d5:7e:97:4f:65:e4:bd:
0a:3c:77:eb:ef:40:6a:6a:00:d5:1f:9b:53:48:c4:
fa:5b:cb:50:cd:ba:d5:a8:3c:03:e7:fc:f7:71:64:
da:52:39:a6:f9:e2:00:da:f4:ed:a9:44:34:b7:e9:
b2:35:a7:cb:3b:b5:1d:58:a0:c7:d5:3e:a6:63:d0:
8b:19:7a:8d:00:3d:82:ca:c7:22:e3:78:d3:fe:63:
82:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:17:16:28:77:DA:9F:40:30:BB:CB:9F:E8:AC:14:3E:6A:B2:87:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/16b7b4-bb21-4b3e-aeb4-b27ca291bd77/1/uBcWKHfan0Awu8uf6KwUPmqyhxs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.164.0/22
62.3.33.0/24
146.19.168.0/24
193.3.190.0/24
IPv6:
2a0e:1e40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
64484
Signature Algorithm: sha256WithRSAEncryption
8d:a4:66:3d:40:03:b2:7b:34:32:68:21:de:63:82:52:0e:3e:
ab:d4:f4:c9:c8:a8:0c:fe:96:ac:21:ae:fa:9f:57:9a:49:47:
b4:cb:bf:39:a4:c0:e8:ce:5b:b0:24:69:2f:04:28:ed:e4:e6:
c0:73:f6:4f:9b:4d:b6:e3:80:04:71:fa:c4:7e:05:f4:28:6d:
c5:ae:b7:0b:14:76:cc:e5:a1:16:59:50:66:5b:9d:75:b0:8d:
90:89:bc:06:b2:a4:47:15:ed:40:e0:e3:3a:73:c1:7e:45:e9:
8b:0e:32:a5:85:5a:a2:86:5f:f7:ac:bd:d0:0e:03:f8:40:f0:
4a:b2:78:8c:0c:44:c5:55:81:c7:b1:ba:f7:5d:6d:2e:59:47:
0f:ca:05:be:3d:8a:ca:36:9f:f4:b7:bb:95:6c:9e:23:76:65:
ac:ec:af:4d:c8:c9:af:03:c3:7e:90:e5:5e:c7:6b:79:e1:d9:
f0:21:56:78:d1:cb:e6:0c:c2:40:6d:83:68:ca:44:03:2b:7d:
97:9f:a0:23:6f:be:db:78:5a:10:cb:40:7c:28:d4:d1:53:f6:
61:64:f3:28:86:47:54:e7:d5:0f:c0:16:fd:33:a5:b4:de:3b:
13:91:5e:6b:6d:27:f1:5d:c2:c5:39:33:0d:24:a0:7e:4e:be:
af:72:37:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:22:33 2025 by rpki-client