Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yJtbKWmeLdQYBAwO33UAhdhyBEI.cer
File: yJtbKWmeLdQYBAwO33UAhdhyBEI.cer (raw, json)
Hash identifier: Bp/9Twwu+iLwkeoZqrOn4AskbzRdMs8PWAcFvTBZFsc=
Subject key identifier: C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421444751927559B6151236C90ABB2AE5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206906
IP: 185.170.120.0/22
IP: 2a0a:a100::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:47:51:92:75:59:b6:15:12:36:c9:0a:bb:2a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c89b5b29699e2dd418040c0edf750085d8720442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:e4:ac:80:86:8e:32:25:60:03:d9:75:b4:
ac:11:fc:f1:0a:68:d2:f2:3b:47:3f:e6:2a:92:a2:
7e:a6:52:f1:87:68:12:83:12:f0:c0:00:80:35:b2:
67:55:75:96:00:97:77:52:ce:f8:9e:3a:13:03:7c:
2e:d3:c8:64:65:df:9b:c8:1d:cb:2f:4f:75:93:0b:
f7:cc:c6:d4:2b:00:38:66:86:67:00:c3:04:44:b8:
91:3e:74:d3:91:a6:56:0b:41:81:e3:e8:b6:17:9d:
da:ab:be:ef:3c:0b:f5:ac:94:37:65:51:98:06:e8:
7a:ca:69:27:84:c6:9a:ec:b3:8c:85:c7:e1:60:c7:
1b:62:96:0d:b0:cc:9b:cf:0d:98:21:15:26:03:72:
7c:a9:a9:52:3f:da:9d:28:e3:b0:29:bf:1e:80:9c:
6b:ff:ab:90:9e:93:0a:4e:13:bc:68:03:44:9d:c6:
d8:31:58:91:6b:f1:2c:ec:e7:0d:d4:e3:e0:d8:67:
58:b9:1d:e7:ce:d6:55:df:b8:e0:08:dc:c9:d3:df:
93:27:a7:3c:6e:16:88:a4:37:3f:06:1e:cb:1d:0b:
fe:eb:fd:54:bb:5d:ff:6f:c5:66:b3:97:74:1e:8c:
99:7a:f5:8b:0c:7d:cd:48:ee:02:9d:98:45:96:34:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9B:5B:29:69:9E:2D:D4:18:04:0C:0E:DF:75:00:85:D8:72:04:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5ec381-7c54-4ba4-b9c1-675759a3b0b7/1/yJtbKWmeLdQYBAwO33UAhdhyBEI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.120.0/22
IPv6:
2a0a:a100::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206906
Signature Algorithm: sha256WithRSAEncryption
a9:15:b7:97:8b:e2:83:7e:e1:a0:37:58:e8:e1:ed:2e:af:19:
3b:87:a6:49:ea:8b:43:e0:56:ad:86:58:c3:c6:7f:7f:75:65:
6a:b0:5e:37:ab:53:4d:1e:d6:0f:d1:da:59:2a:32:f1:fc:a9:
26:a8:d4:46:85:9f:24:10:3a:fd:1b:b7:66:77:ba:da:a9:f2:
98:44:e6:40:c3:01:2a:3a:dc:1c:7f:11:ce:72:e2:f4:6c:37:
76:76:c1:d9:e4:48:1e:23:76:e4:02:c9:30:79:e9:20:20:d1:
5c:c9:b8:85:04:74:f8:c4:87:80:d2:fb:8d:39:45:4f:3d:59:
8f:f4:18:95:c2:e1:96:94:12:19:65:4e:2e:ff:a7:90:f2:fc:
4e:a9:c7:26:cf:da:a9:44:b5:02:b1:94:e4:23:76:99:0c:8d:
0b:df:e0:ef:6f:25:24:6e:05:13:fb:f9:e9:f6:da:10:e7:b9:
b6:85:f7:82:fa:5f:fb:8f:ea:0b:d7:71:bf:d7:c9:0b:33:68:
d1:32:00:21:63:ee:c2:f2:e2:db:dc:00:81:1b:15:13:f7:f5:
45:6b:36:21:7b:0f:bb:0f:e2:8d:6e:a4:d6:9e:a2:24:4a:e3:
fc:08:bb:d0:e1:28:b8:b2:62:5d:c1:6b:23:9a:d6:35:0c:87:
c1:f7:c1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:16:01 2025 by rpki-client