Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer
File: yBXVwM0hRrqv6Kpri5qnzrbkF1o.cer (raw, json)
Hash identifier: SW6kbAxIp2izEvTGshMoG7ozFzvS5sUNMlVBAF33QZw=
Subject key identifier: C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA3C19C63E9ADE308E08FE75B8DB0D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201463
IP: 128.127.8.0/22
IP: 193.8.68.0/22
IP: 194.55.42.0/24
IP: 194.56.168.0 -- 194.56.173.255
IP: 2a07:ce40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3c:19:c6:3e:9a:de:30:8e:08:fe:75:b8:db:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c815d5c0cd2146baafe8aa6b8b9aa7ceb6e4175a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3c:4d:bb:e6:9b:56:4c:44:68:a5:d2:6d:7b:
c9:db:ab:a2:ff:90:c2:65:6f:29:6c:e1:9e:1f:f2:
4f:6d:f6:c1:d3:0a:8c:c5:2f:58:84:12:d7:8b:27:
1d:e3:18:05:9f:b2:aa:56:f2:a8:6e:22:10:3e:c7:
8b:6a:46:3c:91:e6:19:dd:00:ad:06:22:95:8c:de:
00:ab:a1:1f:8d:4e:4d:15:5a:8a:aa:86:ae:b0:f9:
e9:74:1e:41:9c:f8:5f:a4:d6:5d:0b:6f:89:bc:a9:
29:cd:21:db:76:73:24:c2:54:21:77:b2:ae:75:7d:
df:31:62:47:94:b3:df:bf:a4:1c:eb:d7:2a:73:7d:
e7:c3:ae:19:33:78:e8:75:ea:38:f3:69:7c:37:48:
55:73:93:66:56:43:ec:32:ae:05:2e:3c:46:e9:41:
d3:10:7f:08:4f:7a:4f:a4:22:9e:51:82:66:cc:6c:
6a:54:15:bf:e5:26:af:78:1f:67:7a:b7:6f:4c:2e:
53:91:5b:b4:af:4b:bd:a5:cf:fc:a4:41:e1:a6:b0:
4b:b7:fb:4e:25:d8:07:3d:04:8d:e7:75:e5:79:63:
2c:94:94:55:78:a4:70:50:0b:fa:1b:15:f1:b1:fb:
4d:cb:30:d4:77:b5:f3:6a:b7:4b:ed:c7:12:1e:51:
1e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:15:D5:C0:CD:21:46:BA:AF:E8:AA:6B:8B:9A:A7:CE:B6:E4:17:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0eecef-ae8f-4bf9-ab5e-524764a40e22/1/yBXVwM0hRrqv6Kpri5qnzrbkF1o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.127.8.0/22
193.8.68.0/22
194.55.42.0/24
194.56.168.0-194.56.173.255
IPv6:
2a07:ce40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201463
Signature Algorithm: sha256WithRSAEncryption
46:0b:f7:33:9d:6c:3a:28:dd:f7:c3:03:cb:cc:bb:60:70:5e:
21:0a:fc:91:e8:fb:95:b2:26:c8:b6:46:4f:16:eb:87:b1:73:
f2:8e:76:c3:e0:d2:c2:a6:e5:02:9a:bb:4d:59:a0:39:a0:7b:
eb:1a:60:98:eb:a2:b7:14:20:25:29:b9:44:12:89:90:f6:e4:
fc:5b:4c:32:fe:31:2a:00:db:cb:73:e5:5b:db:97:c5:16:c7:
43:af:6c:81:67:f8:09:c4:a5:b1:09:3f:76:de:85:29:96:5a:
2b:cc:6a:e6:52:23:56:9b:3c:60:4c:24:ce:94:58:39:a1:7e:
86:2b:d7:be:e6:ea:15:87:10:f2:65:2e:41:e9:06:9f:39:db:
6c:49:3e:00:74:14:e0:54:3e:27:33:8f:d3:14:73:62:6c:38:
fb:e9:79:10:7b:65:2f:3a:5f:62:81:99:e2:98:9c:28:9e:62:
d6:5c:e8:35:c8:33:61:dd:e2:cc:16:47:4d:4a:b8:28:77:01:
c0:84:a3:e4:c0:d7:67:72:33:77:8f:31:ea:b9:d3:d4:76:a1:
f2:b8:e9:d7:b2:3f:d5:ff:79:51:42:7e:0d:b9:f1:9e:c1:92:
ff:b3:58:0c:d7:e9:a5:8c:e7:d9:f1:55:b8:2d:18:05:26:b2:
4e:d3:19:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:43:05 2025 by rpki-client