Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
File: yFP7eYikLzmDixx_nwQAaS6Sldc.cer (raw, json)
Hash identifier: DIUOuYyVkhH6N8niBZThyxaL35aelxCwwf8cdrZL3SI=
Subject key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01958931FD4645116CDE33B082758057D258
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 12 Mar 2025 07:11:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49427
IP: 91.214.108.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:31:fd:46:45:11:6c:de:33:b0:82:75:80:57:d2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 12 07:11:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:99:61:1a:fe:79:fc:a2:00:d6:bf:ac:ab:b8:
45:b4:fd:06:40:38:7c:00:43:31:a9:05:73:2e:4e:
cc:e0:28:7a:38:c0:13:60:30:49:01:39:17:7c:d0:
53:f5:ce:8d:48:3b:f0:46:df:97:de:e3:09:a6:5a:
8c:80:ac:cb:b9:02:5f:e5:8c:2a:25:20:70:e2:15:
81:f9:b4:3d:73:d8:b3:27:e9:48:29:65:65:d5:d0:
1b:73:de:e8:f0:50:fb:67:9a:44:77:22:09:9f:66:
d0:fe:7f:9e:06:88:03:8b:19:09:5f:29:99:f0:8e:
72:27:af:d1:b0:4b:73:fe:40:a3:5f:53:cb:18:41:
e0:39:c7:fd:bf:e1:e8:7f:b8:24:cc:3d:f5:9d:fa:
34:c5:98:01:53:09:0b:24:03:36:20:fb:0f:4a:74:
73:ce:bb:e5:4c:49:a8:91:e4:fa:a2:61:7f:2f:c4:
f5:15:c7:05:50:14:e0:c6:ee:4b:73:33:fa:8f:2a:
98:27:58:ac:0a:6c:1e:8a:4f:7f:35:4d:63:9c:49:
9a:04:7f:3a:35:f3:df:e3:b3:af:ca:3c:84:27:74:
b8:72:df:7d:f6:62:2e:d5:a0:d6:f1:c0:e5:f0:e2:
37:a5:79:d3:f5:cd:74:83:18:95:ac:40:20:58:21:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.108.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49427
Signature Algorithm: sha256WithRSAEncryption
4e:25:eb:d6:e0:b1:5e:68:af:b5:a0:7b:0b:78:16:48:de:f4:
4b:3c:94:fe:46:a8:1f:e1:fc:9b:97:56:10:d4:55:a5:5a:d4:
6f:97:21:f9:34:14:6f:bc:7a:1a:f8:88:6e:1c:d2:29:e3:e3:
4c:4d:f9:d4:25:f6:82:6e:78:1c:fc:9d:5d:a1:e6:d6:31:67:
bf:ac:97:91:c9:d4:13:37:a0:be:4d:06:a6:20:8e:d6:96:42:
60:0e:45:85:92:66:e0:2c:f4:99:14:a8:2f:f7:e5:af:07:f8:
9a:60:c3:a7:57:9d:70:13:c0:6b:92:43:d4:2b:33:a0:2e:a6:
cc:60:a9:86:5e:25:88:39:45:8d:eb:c9:41:39:b4:5a:ee:d0:
24:2b:65:80:55:1a:4a:74:f0:8c:40:ff:c0:81:6a:e2:54:8c:
1e:d1:26:d1:c5:78:8f:b5:73:78:e3:10:59:62:47:52:64:67:
a4:07:ce:03:b0:e1:bd:ae:35:ab:aa:76:f6:ac:75:fe:09:db:
e5:83:89:33:a0:de:c4:2a:4e:f4:10:f6:8a:57:60:30:1b:91:
c8:56:91:67:58:90:6a:82:d4:2f:b2:28:a2:d2:5f:bc:0a:b0:
e3:4e:50:89:25:d7:d5:19:69:65:da:35:70:ca:61:87:04:1a:
df:ff:46:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:07:11 2025 by rpki-client