Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yyVzFrhB13Pct5reio8-clnxEqs.cer
File: yyVzFrhB13Pct5reio8-clnxEqs.cer (raw, json)
Hash identifier: aKubVQKAD1Iiq1SxNnS5YPbIe2i5CNpaD7DTtUyEuPA=
Subject key identifier: CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F81CD9257D32A8110DE58483F8337
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.106.206.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:81:cd:92:57:d3:2a:81:10:de:58:48:3f:83:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb257316b841d773dcb79ade8a8f3e7259f112ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8d:fb:c0:68:50:e7:93:bb:94:51:dc:16:aa:
03:f5:63:36:c9:fb:81:33:d8:54:36:07:26:67:96:
1c:43:70:fe:8a:f1:48:39:56:79:33:bb:df:e2:ca:
74:6a:df:69:1a:84:53:6d:98:02:a5:6d:fe:5b:61:
ac:75:d7:69:d0:72:e2:81:af:ca:0b:87:ed:92:3a:
d5:4a:30:17:07:37:bd:d3:e8:ac:e6:d8:85:35:0f:
bf:59:eb:bf:a8:de:8a:56:76:ec:b7:9f:2d:66:71:
5c:d7:8b:c2:28:59:ab:66:27:6c:21:09:ce:db:09:
a5:77:51:2d:66:62:d4:cc:ab:cc:79:5e:cb:b0:0e:
f7:4e:c8:59:c4:ba:30:0d:be:e7:34:ba:f0:78:49:
ff:db:76:99:0d:2a:eb:d7:a2:e1:a7:b4:ad:15:bf:
77:15:1e:18:fa:25:a0:11:c6:f9:a4:bb:90:02:c6:
a2:e0:15:96:e4:f5:53:d5:49:91:3a:2b:ca:1f:48:
b7:6b:86:35:43:d7:b6:c0:e7:3f:8d:13:74:2f:8c:
79:0e:73:cf:55:1d:8f:b5:5c:df:33:aa:ce:ff:c1:
ab:73:cb:d8:4f:70:25:e8:f2:55:fc:2c:0b:b4:ce:
d5:c3:2d:a5:18:61:71:8b:f8:9c:b4:78:8a:7b:2c:
a1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:25:73:16:B8:41:D7:73:DC:B7:9A:DE:8A:8F:3E:72:59:F1:12:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c92c90-0eeb-4fc2-a7e1-ba14e76548e8/1/yyVzFrhB13Pct5reio8-clnxEqs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.106.206.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:72:a7:a6:51:1d:80:fd:a3:90:5c:bb:2e:5b:06:9b:1b:94:
1f:3d:d4:52:c1:c6:b7:de:73:a9:01:d8:34:2e:1b:0e:44:dd:
3c:54:14:c5:37:4d:22:d8:60:10:20:cc:97:ec:de:af:78:a0:
7e:fd:aa:23:83:c6:52:fd:12:27:0a:1e:2f:5a:1c:4c:51:f4:
11:33:87:1b:ed:06:7e:94:d3:2a:e2:c0:ed:c5:78:61:7a:1b:
66:64:01:7d:75:50:7c:e1:ba:70:92:48:2a:9e:6a:8d:02:4e:
10:ec:05:fb:d4:ed:64:7f:ab:ca:e5:90:99:e8:e6:6c:11:63:
64:de:18:54:a7:ab:57:73:b2:0a:2a:e2:e2:d7:c4:97:44:02:
92:75:82:cb:28:3b:93:6a:cc:91:4a:39:cb:bd:76:05:85:a2:
6d:bb:73:4a:2d:09:4c:1d:81:b3:49:99:e5:f4:3e:20:b2:06:
c4:20:1d:d8:0d:ea:83:94:2a:84:eb:fb:fb:a2:1b:1c:55:ee:
8e:b3:16:a4:7d:e1:05:32:99:e9:78:cf:ab:92:f8:65:d8:c9:
56:ab:65:c3:1d:91:bf:72:7d:0f:92:c2:d6:93:23:53:52:db:
07:bb:7c:0e:77:ea:40:7f:f4:54:87:d0:97:f5:11:aa:40:0f:
bb:83:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:43:28 2025 by rpki-client