Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer (raw, json)
Hash identifier: 0dyk5nSWF27Q6/A4ZV9Z72Ck2DlvEZLSDZJEWRIAUB8=
Subject key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D74429D479DC7760635335B2EC7299
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207661
IP: 194.32.161.0/24
IP: 194.32.163.0/24
IP: 194.32.165.0/24
IP: 194.32.203.0/24
IP: 2a05:5100::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:44:29:d4:79:dc:77:60:63:53:35:b2:ec:72:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:58:2b:1d:41:24:12:3a:95:9d:5b:92:25:
80:aa:5c:04:6d:80:df:e3:28:11:1b:aa:a0:e7:28:
4d:1a:fe:af:58:43:8a:78:d7:4a:53:eb:7d:a4:7e:
91:c2:e3:e8:fc:6b:34:8c:d4:a5:96:5c:9b:8e:bb:
9b:d5:64:50:3b:c9:c1:4e:84:a1:f6:f9:e9:68:42:
6a:22:9f:ab:65:ee:b3:bb:a3:b3:cc:d6:95:7d:3c:
fa:7b:98:22:b6:b1:44:96:3c:f5:9b:ce:a8:a4:c3:
f5:f1:21:55:b1:af:25:cc:75:47:c8:da:27:42:f6:
be:07:5d:12:f7:6d:47:8b:b8:1f:d9:7d:e7:a2:e6:
fb:7c:29:95:b5:b9:9a:5b:17:a3:46:44:25:72:eb:
f3:ef:24:01:1e:e7:ad:27:70:c2:92:3b:c1:23:e5:
4d:10:20:4c:76:51:48:c8:c9:f1:90:2a:f8:d6:7c:
2e:b7:47:7c:fd:7f:cd:69:42:d1:3b:b1:39:11:ee:
6b:db:de:42:cb:a0:21:f2:a4:09:a0:a6:11:ec:ad:
f1:28:b5:5d:b4:4a:6b:61:14:14:4d:62:62:1a:d6:
36:c5:27:83:bf:af:2e:68:6e:da:44:79:2e:5f:fc:
9b:a0:bf:35:b8:2b:2a:cb:8d:ca:b7:5d:2d:3a:81:
f8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.161.0/24
194.32.163.0/24
194.32.165.0/24
194.32.203.0/24
IPv6:
2a05:5100::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207661
Signature Algorithm: sha256WithRSAEncryption
92:22:64:82:0a:fb:2c:88:e4:fa:4d:6c:ca:df:15:23:1d:8b:
55:05:a4:0b:88:7b:bd:d5:5a:a0:25:09:5d:8b:50:96:12:4c:
52:a6:8c:83:4c:26:c6:28:c5:9f:f8:3d:c0:8f:c2:f2:94:c5:
b6:a4:eb:e5:6f:3b:1b:e3:9d:4c:77:5d:7c:28:a6:b1:63:d6:
9a:a3:f0:1d:4f:83:be:53:27:75:31:10:90:6b:22:a7:f7:65:
1c:c4:b4:d5:6a:82:04:75:ed:c0:3c:e9:de:49:f8:df:68:31:
b3:d9:17:31:02:80:a9:c9:46:c3:c2:6e:76:a9:fa:4d:45:8d:
53:0e:eb:d7:61:86:c8:61:19:ac:02:69:8e:3f:f0:9a:9f:5a:
24:ff:bd:7d:17:52:94:7c:42:03:7a:8f:87:09:93:4e:4f:ee:
97:de:21:47:b8:08:ec:82:fe:66:ae:70:c7:71:6e:39:85:62:
c6:a6:54:90:27:86:ae:4f:1f:4c:68:ac:97:14:83:0a:03:73:
34:38:ce:44:0a:28:ed:46:22:9f:af:53:72:66:35:36:f5:a4:
89:a8:34:53:33:ce:ae:25:0c:3c:90:cf:55:16:1a:94:b5:03:
b7:f3:a8:a4:7f:b1:b9:8c:62:6a:30:67:4f:6d:61:0d:fd:e6:
d1:90:38:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:01 2025 by rpki-client