Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
File: we7iyrhrXuQPwncMqMtcUMYrdVs.cer (raw, json)
Hash identifier: y6E/nBpNWVbHAIz+ntChLG3JgBgAKaqa5D+alLORQWs=
Subject key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FA728B069463181C27816A5E0CAD9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43067
IP: 91.196.80.0/22
IP: 91.234.72.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a7:28:b0:69:46:31:81:c2:78:16:a5:e0:ca:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:90:00:0e:13:ad:8c:29:28:69:4a:3d:46:37:
09:30:de:26:18:9d:7f:af:52:77:cf:03:6b:0d:e2:
1a:06:42:94:57:74:7c:64:a4:a2:51:99:a4:c1:82:
18:97:92:fc:6d:8f:8c:f7:5a:7e:7b:c4:db:fd:ca:
62:e3:7d:76:f6:3e:6c:77:08:74:e5:9a:46:c1:5f:
2c:74:50:47:a0:03:e3:d8:44:a3:5a:45:32:39:a3:
35:c5:0e:ff:48:7d:05:0c:47:2d:08:f3:37:db:ac:
d1:ae:a9:cb:30:02:7b:0d:af:ff:d8:ef:9e:55:3a:
e7:be:85:69:af:4f:1e:41:eb:fd:3b:63:dd:77:2d:
7c:37:ed:02:59:ec:62:fb:b2:49:9e:3b:b1:8b:63:
56:08:03:c6:23:09:3d:c8:27:de:98:46:ee:04:41:
2d:59:f1:05:87:8f:57:1c:05:f6:0f:ad:f6:97:29:
b3:ed:93:0a:d1:53:ae:82:78:60:eb:84:56:56:07:
6a:d1:3e:eb:36:50:ec:d9:7e:70:28:ad:ca:cc:9d:
15:de:d1:f9:84:b3:32:8e:15:3b:16:cb:52:76:35:
9a:62:9b:d2:c0:4a:a4:42:3d:0a:34:70:a1:3a:86:
c3:b4:b6:f3:ee:0b:a3:47:32:d9:eb:c2:0d:b8:66:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.80.0/22
91.234.72.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43067
Signature Algorithm: sha256WithRSAEncryption
27:8e:ea:4f:0c:30:95:ae:e7:a9:51:6b:ad:04:7f:88:ae:81:
95:fb:4e:0d:83:43:7f:cb:07:13:3e:a8:c4:d3:20:3d:0e:a1:
25:17:03:5c:94:b8:ae:c5:16:af:7c:ab:fe:a5:e4:8d:ae:7d:
4d:ef:07:7a:c4:ca:b8:f1:05:1c:df:5e:25:82:66:28:d1:78:
df:84:36:b1:92:3e:fd:28:a8:08:b3:67:58:d8:08:c5:77:a8:
78:05:ad:31:e9:af:eb:b1:5e:47:9f:f0:d6:00:ec:3a:00:ac:
91:7a:24:0c:12:a7:6a:d3:e3:04:61:f0:f6:61:67:6e:e1:33:
3c:9d:9f:22:c1:bd:26:56:81:a8:d5:0d:9a:bf:a5:df:84:29:
98:c1:ad:33:be:bd:a5:4e:43:ee:e6:72:be:86:e4:cf:3a:0b:
69:a3:f8:1c:11:c1:b4:99:f0:91:2f:23:4d:da:fe:7d:74:85:
cd:dc:8b:d0:70:89:39:f4:6a:b5:01:da:77:4e:bf:9c:c8:24:
f6:20:bd:ce:a6:73:04:8e:f2:ca:dc:17:b2:40:35:4b:6f:19:
f0:3c:25:fc:e1:b9:93:b3:18:ab:e0:d9:03:8a:e4:09:4f:20:
f1:06:c5:96:dd:e1:7f:69:03:5b:bd:61:38:90:a2:0e:e1:b7:
48:4f:2b:ab
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:20:42 2025 by rpki-client