Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vgu3iGnNsq0MlxpqhYowIT6uxH0.cer
File: vgu3iGnNsq0MlxpqhYowIT6uxH0.cer (raw, json)
Hash identifier: XQvQjWCDfCQeTEgs1uTUg0w58QWe3YOzizpH0jluLm8=
Subject key identifier: BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01951A1E5E43510B958011E4F46E12D00E15
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 18 Feb 2025 17:32:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48435
AS: 50434
IP: 178.248.72.0/21
IP: 193.169.78.0/23
IP: 195.42.112.0/23
IP: 2a01:6c00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1a:1e:5e:43:51:0b:95:80:11:e4:f4:6e:12:d0:0e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 18 17:32:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be0bb78869cdb2ad0c971a6a858a30213eaec47d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:24:a6:11:09:8e:48:47:f7:46:74:c4:d5:2c:
a4:ff:42:77:b2:77:37:71:01:72:e6:db:0f:bb:7b:
58:a1:74:06:82:86:9a:b8:41:71:db:df:47:56:fa:
05:58:ee:45:a7:04:44:92:a7:5e:fe:67:63:8b:e0:
3e:08:94:6d:95:1a:5c:58:a2:b3:55:01:35:bf:fb:
12:6e:21:0e:ee:46:77:fb:25:6a:34:02:3a:a8:45:
c6:2e:ed:78:3c:a0:b1:bd:8d:4b:4d:c3:f0:af:86:
ba:fa:0d:67:d1:36:89:4b:c0:6b:63:53:4b:48:98:
51:85:9d:af:3d:bd:70:a0:3f:eb:03:7e:94:0a:51:
0b:73:48:98:75:77:e9:97:58:2c:ac:5a:7d:38:72:
f7:f4:a3:a9:00:2f:93:39:5d:aa:d8:7e:bb:6f:24:
7c:63:d9:95:e0:b8:e6:df:c7:76:fe:99:9f:93:a4:
10:e0:bb:30:9a:0e:56:36:02:78:18:83:f2:98:c9:
5f:ea:85:2c:b1:3e:80:b0:7d:d7:c3:d7:89:a2:e3:
dc:ac:40:b2:1c:53:bd:18:8b:56:62:f1:77:d4:43:
ce:be:79:c6:79:ec:ec:6d:e6:c7:d3:a4:f9:db:63:
0b:c9:ec:70:03:0f:68:f0:84:e4:30:9a:a7:7a:61:
90:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0B:B7:88:69:CD:B2:AD:0C:97:1A:6A:85:8A:30:21:3E:AE:C4:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac143387-f013-4922-838e-e18864be1e4a/0/BE0BB78869CDB2AD0C971A6A858A30213EAEC47D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.248.72.0/21
193.169.78.0/23
195.42.112.0/23
IPv6:
2a01:6c00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48435
50434
Signature Algorithm: sha256WithRSAEncryption
52:00:85:aa:24:86:21:8a:54:1b:7e:e6:8a:44:6f:d9:23:cc:
d7:df:03:38:7c:b0:8b:cc:f5:53:db:74:43:95:fb:0b:60:83:
ed:22:16:55:1a:13:49:29:90:b5:39:40:6c:e9:dc:05:77:6a:
e8:d8:d5:30:ef:1a:1f:67:ef:32:06:ce:23:65:8b:bc:ba:b5:
eb:9a:32:78:e6:4c:3f:de:78:3e:2d:56:1e:8a:7e:50:02:e1:
5e:57:81:87:27:7e:7f:b7:c6:20:2f:7f:8f:d2:f7:2b:19:af:
6a:af:70:66:c8:70:82:5e:3f:11:de:4b:21:ee:1e:09:48:87:
3a:7e:36:12:c8:c2:ba:61:35:06:54:2a:b5:72:04:47:fc:a9:
e6:12:fd:73:83:b9:c7:c0:8b:91:6b:8b:97:8a:8e:2f:af:a1:
76:ec:5e:37:4c:8a:01:73:99:7b:15:a5:11:92:2d:46:7f:d6:
df:57:a7:ae:d9:0a:65:57:d2:9d:67:c3:e4:f0:88:72:20:80:
0e:3d:0e:31:6b:d0:ea:03:31:c1:4d:67:79:93:04:e9:44:06:
c6:c2:74:c8:c0:c1:c9:ff:ff:f8:01:35:49:0f:c2:cf:54:f5:
10:ce:c1:bb:a2:8f:54:16:18:de:b1:59:72:c5:d3:c9:fc:15:
92:47:32:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:44:10 2025 by rpki-client