Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
File: xFvSa8XYHu6cjhotDXjRDarggZU.cer (raw, json)
Hash identifier: yVD0j28YGnx96yRy3se0IdqkCpawSV6ua7TX904zJMk=
Subject key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7C21FA54C244A27CCB3E418D964FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51168
IP: 91.216.4.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c2:1f:a5:4c:24:4a:27:cc:b3:e4:18:d9:64:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:76:28:9b:32:b1:ed:ea:d7:6d:64:b1:7b:
b7:1f:5c:50:fb:36:b3:a0:3a:02:f0:28:3c:02:6e:
76:b4:7f:5d:d3:7c:c8:7a:98:a7:8f:79:f7:63:b1:
5a:5a:25:e9:6e:c3:0d:a4:19:a9:99:43:75:cc:e0:
f9:c4:92:a1:c9:f2:e9:df:45:0e:59:e1:60:db:64:
cb:8c:fc:f5:a3:ee:0a:e6:49:ab:87:f1:ff:ca:ae:
6a:3c:35:38:8e:1c:97:b3:c6:0a:1f:67:c8:06:a2:
76:59:4b:f6:c8:50:22:f0:46:ce:ed:ec:fe:91:1e:
78:de:88:0b:ef:40:4d:71:0a:a4:4f:fd:41:34:5e:
c3:f3:18:66:ee:da:43:6c:1f:57:b5:21:8a:0d:32:
aa:7b:93:b1:ee:8f:05:8b:ca:a6:8f:d7:0e:41:69:
28:8b:df:43:98:6a:86:9f:b9:35:74:e0:e0:99:95:
ac:63:be:79:ce:2d:27:0d:7e:6f:88:b7:16:86:ca:
95:aa:68:a4:0e:2b:8d:8a:c4:13:1a:0f:4b:d8:0b:
e6:05:5e:77:bf:18:ab:89:15:6c:e9:94:2a:8b:fe:
ab:a3:92:2f:75:fa:a0:69:8a:1f:e3:bc:25:cb:49:
8c:27:68:30:d1:f9:3d:17:bb:29:cd:34:a5:af:42:
9f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.4.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51168
Signature Algorithm: sha256WithRSAEncryption
56:bd:28:21:17:99:92:ef:ab:66:30:91:d1:36:93:c2:2d:50:
17:c5:e4:a5:40:ca:30:59:fc:ea:6e:9c:45:3a:65:90:05:d6:
d2:b3:22:3a:59:7d:aa:71:20:30:0b:1b:28:2e:9e:70:82:99:
10:47:43:82:08:42:8a:70:f8:fa:49:ae:47:f9:1c:aa:ce:9c:
65:d6:82:cf:5c:20:20:2f:eb:fe:41:38:d7:ea:6b:c6:51:ee:
74:7b:1d:db:5b:c2:23:c3:79:df:06:46:7b:86:7a:c2:bc:5e:
d2:52:d0:a8:f4:b3:2f:34:ba:69:d1:62:a8:46:3f:6d:5f:d8:
3a:75:0d:46:35:4f:0a:eb:55:8f:03:40:65:ca:42:37:65:10:
7d:2d:75:e4:0c:c2:4f:d9:af:f9:17:61:9b:7f:4b:30:0c:ec:
de:c0:a0:19:77:60:92:c4:59:0e:68:b5:27:c9:a0:40:5a:95:
b7:7c:34:87:f6:77:f7:28:93:24:bb:cb:d4:c7:e2:0d:3c:cc:
35:ef:bc:49:5b:75:6b:1a:56:97:f2:fe:90:9b:a8:8f:db:bc:
2c:2d:87:b4:bd:e0:c4:f9:ac:ff:c7:fb:95:48:09:b7:c8:03:
9e:3e:97:f0:8a:ab:22:65:c7:33:9e:3f:07:d4:9d:e0:8e:40:
29:b0:5b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:36:52 2025 by rpki-client