Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer
File: wdwvhQJhWMvZ_0naFdsiXwUwdKw.cer (raw, json)
Hash identifier: kiY6afJB6J+U3BnpEmZZt5SteysfUWEesr4JtVkMIyI=
Subject key identifier: C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067F73B0417F9CEB6ED5C1FE3AF14F3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47883
IP: 5.104.0.0/20
IP: 37.34.0.0/19
IP: 94.79.64.0/18
IP: 2a02:7d80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f7:3b:04:17:f9:ce:b6:ed:5c:1f:e3:af:14:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1dc2f85026158cbd9ff49da15db225f053074ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:50:f1:3a:c9:fa:46:ae:3e:4a:c7:5b:86:
e9:5f:3a:a2:b8:a9:b8:61:75:95:bb:d4:89:a0:32:
1c:30:01:c2:04:50:7a:05:f1:50:ac:14:67:6f:76:
10:11:45:32:2a:c1:94:3e:13:ce:20:d0:02:81:31:
8b:57:e4:5a:6f:81:a3:c3:fd:16:3d:fc:29:41:dd:
04:39:41:86:6a:8f:ec:6c:c7:d3:9b:03:50:1c:33:
cc:48:57:ad:b6:58:d3:f5:c9:0b:fd:81:d8:93:d7:
f2:f3:3e:87:34:c2:93:8e:44:d4:81:11:0b:67:2b:
3b:75:05:d1:a2:b3:7d:42:c8:ef:9b:34:ba:0a:f1:
af:a0:c0:cc:6b:45:84:e8:b9:5b:a1:4d:1b:64:a4:
21:dc:1a:2c:cf:38:ba:56:78:e4:79:1d:24:3d:9e:
4a:0d:fc:0a:a2:89:28:09:12:24:3e:15:fd:a7:3b:
a7:63:4b:d0:af:91:6d:50:2a:f6:3b:66:df:cd:0e:
1a:ec:e3:4f:3d:0d:e0:ba:fc:5c:95:cb:ce:2b:12:
d2:37:12:66:c9:eb:23:ac:5c:12:34:8d:76:99:cb:
6a:7c:9e:f0:49:43:55:b9:02:b1:c6:06:d0:e9:a7:
57:02:3c:2a:6c:b4:95:fd:f2:77:9c:18:69:69:ec:
6b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DC:2F:85:02:61:58:CB:D9:FF:49:DA:15:DB:22:5F:05:30:74:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/6f3e89-0018-4dc9-a95a-284ec81602e7/1/wdwvhQJhWMvZ_0naFdsiXwUwdKw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.0.0/20
37.34.0.0/19
94.79.64.0/18
IPv6:
2a02:7d80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47883
Signature Algorithm: sha256WithRSAEncryption
02:bf:84:fb:9e:4d:3f:f0:de:42:73:b4:15:cd:1f:d9:e9:40:
92:0b:58:58:94:95:fb:fc:87:87:f2:2f:a3:ad:5a:f9:4d:b9:
59:db:88:0b:a2:58:27:da:35:7e:1a:09:3d:c8:17:60:8a:96:
27:71:1b:38:f4:c3:88:9d:cf:2a:2f:a7:15:b6:a3:73:4e:2a:
4e:07:5c:19:eb:33:81:3c:13:09:ee:ff:d8:f6:a8:1d:62:98:
30:76:8b:91:47:6d:d5:65:96:63:bb:dd:9a:6e:10:55:de:4b:
2b:02:37:ed:15:ff:7e:49:70:75:14:b7:ea:68:19:5a:9e:12:
53:15:7c:14:c2:7c:c9:bd:86:c4:c0:b3:01:d6:a3:dd:e4:59:
fc:95:53:55:b6:aa:6c:34:7e:6a:f5:cb:b3:81:8a:4c:a2:bc:
2a:66:91:08:dd:fc:8d:82:4a:1d:71:d8:16:cd:e0:5d:28:0e:
a9:65:7b:03:30:8c:cb:b5:a4:52:73:ed:45:ef:b2:a7:e9:f0:
a6:4f:90:90:6f:e6:be:f0:48:3c:34:0d:b1:df:1a:09:8b:09:
a5:1c:29:dd:a6:37:11:b5:c2:65:bd:36:b7:56:2c:2e:6c:5c:
eb:47:dd:ea:e9:93:e8:40:e2:34:a9:28:ef:3e:db:ab:c9:d2:
22:d2:60:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:54:27 2025 by rpki-client