Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer
File: yFk5IyV7IO2kqkvDxKDDDYSQ6lY.cer (raw, json)
Hash identifier: Wy+Bs2+dXXsbqUXORyLVy1isr+W2owCYjt4tjp+AtOc=
Subject key identifier: C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D91752D928008B1FF9B7946DADF618
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41545
AS: 43809
AS: 196704
IP: 83.171.228.0/22
IP: 95.128.112.0/21
IP: 185.8.80.0/22
IP: 185.184.92.0/22
IP: 185.215.8.0/22
IP: 195.88.130.0/23
IP: 2a02:d900::/29
IP: 2a0a:9c40::/29
IP: 2a0f:10c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:17:52:d9:28:00:8b:1f:f9:b7:94:6d:ad:f6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c8593923257b20eda4aa4bc3c4a0c30d8490ea56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:68:32:69:3b:a5:6f:5d:99:6d:c2:f0:c2:3f:
f4:7a:5f:03:df:df:3f:de:4b:4f:71:77:22:b3:9f:
2c:cf:39:1f:1e:f0:ce:73:9f:26:45:38:f9:3e:62:
05:ec:fd:ef:e5:ba:8e:d3:a5:9b:3c:4f:32:b3:36:
51:21:d3:19:34:31:15:33:e4:2c:ce:13:cd:fa:7c:
ab:56:0e:c7:10:47:84:8c:21:ad:4e:7f:cc:42:da:
f3:96:1d:60:e6:40:e8:a7:9d:c8:94:39:c0:06:c1:
ad:37:e9:d6:d4:36:4c:e4:97:31:82:ee:1e:9a:33:
dc:aa:0a:b4:56:d4:c4:b3:4c:15:17:83:57:17:09:
6a:db:5b:85:e9:62:ab:7c:88:22:9f:83:20:c7:b4:
cb:a9:7e:3d:ba:d2:05:d2:ff:9d:c0:aa:8b:ac:c8:
a1:a1:0a:9b:31:46:e1:25:4f:f3:e3:b3:c0:00:c2:
3d:13:f2:74:e5:c7:2e:c4:7c:70:a4:a8:fc:80:17:
ac:f3:b3:08:f0:27:c7:21:5e:41:d3:46:a7:04:4f:
9e:65:e8:57:f5:bd:68:e1:8a:d4:c7:3d:18:86:6e:
a5:5b:89:c9:66:30:a7:b9:54:39:4a:55:d0:c0:32:
06:9d:5a:0e:18:02:74:f9:46:3e:aa:c3:3c:43:ef:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:59:39:23:25:7B:20:ED:A4:AA:4B:C3:C4:A0:C3:0D:84:90:EA:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a04956-7462-49eb-a9db-dc6be8ce5fb2/1/yFk5IyV7IO2kqkvDxKDDDYSQ6lY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.228.0/22
95.128.112.0/21
185.8.80.0/22
185.184.92.0/22
185.215.8.0/22
195.88.130.0/23
IPv6:
2a02:d900::/29
2a0a:9c40::/29
2a0f:10c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41545
43809
196704
Signature Algorithm: sha256WithRSAEncryption
6d:e0:89:3f:4b:04:6a:7f:bf:a2:c0:41:b3:83:56:52:55:fd:
40:ac:d8:5d:03:27:92:ec:d5:45:47:f1:d9:6f:26:f3:60:9a:
50:a1:e2:f7:86:e1:8c:2d:ad:5d:00:f0:c0:d0:c1:52:f0:8c:
3a:a4:df:c1:eb:90:01:7a:ad:ab:d6:b2:f4:42:da:7d:c1:43:
43:ab:c5:93:ee:2e:ab:f0:f6:c6:1e:2e:13:54:29:3c:9c:da:
6e:01:e0:f4:e1:37:09:b9:14:50:8c:8b:58:b4:8e:d5:88:7d:
e2:d0:3a:4f:e2:34:86:61:ee:6a:2d:08:43:50:7a:2d:64:b1:
7b:a7:c5:92:47:c8:5b:9e:c7:b9:d7:2a:10:8e:7a:69:e2:39:
02:aa:90:70:7b:fb:c0:3d:73:ab:ee:10:d9:d4:1b:34:3e:92:
9a:e4:85:d3:29:73:7f:37:62:43:61:e1:ad:47:6b:d1:9d:0f:
71:fe:58:85:2c:6d:9d:94:70:ec:4b:2d:fe:cc:74:94:fb:f3:
99:f7:24:09:e4:d7:13:da:4f:34:f4:7a:d6:1d:43:eb:25:1d:
6e:bc:f1:48:b4:33:87:42:ce:8c:63:c4:c0:96:64:88:8d:b0:
32:fb:f3:e2:65:09:2f:00:d5:39:34:35:74:08:ad:c0:37:16:
ef:d3:15:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:49:09 2025 by rpki-client