Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
File: w8YbUevIQYDwprIy6H351hyQ-qs.cer (raw, json)
Hash identifier: B7HJnU1Yfc/i9N6x/mkPNeSkBf5IClkNNqZlQZkWjgU=
Subject key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BF7CC78204B9C1C3EF31BB68C46E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44279
AS: 52142
IP: 46.174.176.0/21
IP: 91.210.128.0/22
IP: 185.16.144.0/22
IP: 195.69.80.0/22
IP: 2a03:c940::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f7:cc:78:20:4b:9c:1c:3e:f3:1b:b6:8c:46:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:39:35:9a:53:f0:a4:dc:53:e8:4b:83:38:
54:d1:c3:41:9f:b0:3a:3c:1d:e8:a3:1d:f2:da:2f:
bc:c7:74:21:3d:d3:ef:82:ca:e5:07:7d:6c:34:aa:
c3:9d:c4:69:bc:79:c2:9b:c8:93:fd:9b:55:17:42:
77:99:35:c6:fa:52:2e:62:d8:1d:f6:b4:89:26:0d:
91:53:d1:b3:e1:d3:53:6f:5f:57:09:30:ed:67:f0:
bb:69:60:1d:fc:bf:bc:1d:e6:aa:02:9c:91:1b:c3:
02:59:e5:1d:63:d7:43:32:10:2d:de:0c:59:88:09:
fa:9e:e7:3b:6b:a2:88:bf:32:f8:c6:53:f6:67:2f:
56:a2:23:56:f3:18:d8:53:2d:12:4e:27:6d:03:fd:
5d:7e:c5:19:10:c3:36:cb:a5:9e:92:af:08:84:76:
d4:36:e0:f6:a0:b0:e7:0b:3e:08:5f:0f:92:b5:d1:
e9:00:b9:41:ae:b9:ed:13:ac:83:f2:47:7d:66:f7:
36:0b:4e:b3:5b:dc:51:6c:6b:dc:50:71:18:50:7c:
be:2e:28:84:08:f1:6c:99:57:f9:e3:e4:8b:cb:60:
3b:93:78:1c:cf:3f:13:ce:a0:a6:ee:63:3c:cc:d0:
fd:05:7c:22:0d:53:46:81:15:6d:2f:95:2a:64:8e:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.176.0/21
91.210.128.0/22
185.16.144.0/22
195.69.80.0/22
IPv6:
2a03:c940::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44279
52142
Signature Algorithm: sha256WithRSAEncryption
2f:c3:3d:37:67:f2:4a:9f:6b:46:cd:60:ca:9a:87:b7:bc:9a:
d3:98:c9:55:86:09:03:75:3c:33:21:61:1f:ee:86:1d:a4:8b:
5e:18:19:89:5d:05:b0:ec:2f:c4:27:c8:38:44:17:cb:01:b9:
e9:f4:0c:b5:45:fe:81:b0:fd:2a:b5:1c:1a:4d:34:0f:0f:57:
09:bb:f8:4d:b0:cc:2e:9a:1a:09:df:28:b2:77:2e:ac:de:e9:
a8:3f:ad:82:b7:e6:55:3e:8f:35:3f:ba:68:5b:53:0b:bb:f3:
29:7b:8d:ca:52:2f:c3:33:42:c9:8a:e3:bb:bb:e4:93:5c:52:
c4:93:ad:aa:b3:42:63:d2:01:d7:ee:46:d9:e2:9e:61:1e:03:
df:61:49:ae:39:83:c0:0f:aa:58:6c:f7:72:d6:a8:d2:d6:94:
91:3d:84:7b:81:2c:f3:86:65:70:86:29:1c:15:f8:6a:5a:0b:
7e:2f:43:04:25:ff:c8:16:ad:2d:2d:d9:da:da:8d:96:08:34:
48:90:6a:b7:8b:69:eb:99:12:93:4b:c5:ab:cc:91:b2:29:7f:
8f:bb:71:bd:7d:c9:f6:eb:09:9a:d4:3a:25:5c:61:33:70:12:
9a:c2:1d:ad:6d:13:2e:ea:43:e1:64:43:cb:77:b4:e7:99:c9:
32:59:48:a1
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgISAZQma/fMeCBLnBw+8xu2jEbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2M2MWI1MWViYzg0MTgwZjBhNmIyMzJlODdkZjlkNjFjOTBmYWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPk5NZpT8KTcU+hLgzhU0cNBn7A6
PB3oox3y2i+8x3QhPdPvgsrlB31sNKrDncRpvHnCm8iT/ZtVF0J3mTXG+lIuYtgd
9rSJJg2RU9Gz4dNTb19XCTDtZ/C7aWAd/L+8HeaqApyRG8MCWeUdY9dDMhAt3gxZ
iAn6nuc7a6KIvzL4xlP2Zy9WoiNW8xjYUy0STidtA/1dfsUZEMM2y6Wekq8IhHbU
NuD2oLDnCz4IXw+StdHpALlBrrntE6yD8kd9Zvc2C06zW9xRbGvcUHEYUHy+LiiE
CPFsmVf54+SLy2A7k3gczz8TzqCm7mM8zND9BXwiDVNGgRVtL5UqZI7d0QIDAQAB
o4ICxjCCAsIwHQYDVR0OBBYEFMPGG1HryEGA8KayMuh9+dYckPqrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUxLzdhYWRh
Yi05NTlhLTQ2NjMtYjkzNS04Zjk4MjczNDQ3OTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTEvN2FhZGFi
LTk1OWEtNDY2My1iOTM1LThmOTgyNzM0NDc5MC8xL3c4WWJVZXZJUVlEd3BySXk2
SDM1MWh5US1xcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQDLq6wAwQCW9KAAwQCuRCQAwQCw0VQMA0EAgAC
MAcDBQAqA8lAMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCs9wIDAMuuMA0GCSqG
SIb3DQEBCwUAA4IBAQAvwz03Z/JKn2tGzWDKmoe3vJrTmMlVhgkDdTwzIWEf7oYd
pIteGBmJXQWw7C/EJ8g4RBfLAbnp9Ay1Rf6BsP0qtRwaTTQPD1cJu/hNsMwumhoJ
3yiydy6s3umoP62Ct+ZVPo81P7poW1MLu/Mpe43KUi/DM0LJiuO7u+STXFLEk62q
s0Jj0gHX7kbZ4p5hHgPfYUmuOYPAD6pYbPdy1qjS1pSRPYR7gSzzhmVwhikcFfhq
Wgt+L0MEJf/IFq0tLdna2o2WCDRIkGq3i2nrmRKTS8WrzJGyKX+Pu3G9fcn26wma
1DolXGEzcBKawh2tbRMu6kPhZEPLd7TnmckyWUih
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:23 2025 by rpki-client