Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer
File: zWudWTrFSqbLuDiJJ3uiT1QGeIk.cer (raw, json)
Hash identifier: 8lRgnmPNxSwgmpnyQxzIY7LjGHn8O+ND97sOuTV4mjY=
Subject key identifier: CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01948362C36B0C44572C73719743A3A4AAA9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 20 Jan 2025 11:04:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12796
IP: 94.190.128.0/20
IP: 94.190.160.0 -- 94.190.194.255
IP: 94.190.252.0/22
IP: 192.109.40.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:62:c3:6b:0c:44:57:2c:73:71:97:43:a3:a4:aa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 20 11:04:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd6b9d593ac54aa6cbb83889277ba24f54067889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:22:4f:14:97:3a:e9:29:f6:46:af:20:ac:
f9:31:c4:79:ee:c2:b9:26:6b:52:a9:6f:08:6b:70:
7f:6a:3c:eb:f2:32:ea:27:12:fa:aa:79:f7:a6:37:
08:5c:6b:2a:1c:ef:f4:68:12:22:82:58:67:22:b8:
7e:fb:3b:82:94:4b:2b:c3:64:e0:ee:1b:39:49:28:
5b:e0:49:1d:00:7f:99:02:61:30:0f:1b:47:ed:51:
a7:aa:8d:bf:77:a8:27:0b:76:64:35:ca:5a:b5:a0:
97:f2:76:43:7f:12:5b:49:90:eb:b4:fe:b5:29:c6:
f3:a1:79:5b:65:be:87:6c:4d:55:1f:f1:18:d0:88:
b7:95:cb:d2:a5:3e:e6:a0:92:3c:25:b7:e3:22:0b:
93:78:09:fe:91:89:10:b9:b3:2e:8d:8d:26:9f:1c:
cb:a2:a2:3e:a4:ad:31:4d:57:ab:05:d9:8b:44:a4:
c8:e3:9b:46:ab:c8:52:48:fe:5f:da:46:a7:75:cc:
4e:f3:97:43:9b:e1:99:9b:ba:7b:2b:30:5f:c9:03:
db:53:6f:db:6b:f9:16:47:e5:4a:aa:e0:86:74:dd:
18:75:73:52:f0:45:21:ac:00:68:dd:90:34:82:c9:
c9:c9:3d:22:3c:a5:e2:79:2a:90:08:03:16:d4:7a:
f2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6B:9D:59:3A:C5:4A:A6:CB:B8:38:89:27:7B:A2:4F:54:06:78:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e68e1b-356c-4868-909f-42606f5aa5b9/1/zWudWTrFSqbLuDiJJ3uiT1QGeIk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.190.128.0/20
94.190.160.0-94.190.194.255
94.190.252.0/22
192.109.40.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12796
Signature Algorithm: sha256WithRSAEncryption
6b:7f:fc:63:84:2d:1f:87:bb:a0:29:ad:19:92:f2:6e:50:06:
72:07:a8:b6:0a:de:96:89:18:4f:3f:a5:7f:3a:ee:61:90:08:
ee:d1:77:80:a8:b2:5b:9d:7e:ec:d7:8a:a1:7a:43:96:c6:78:
31:c2:04:e2:60:73:71:dd:dd:59:76:8c:f9:80:51:7f:0e:23:
34:1c:ec:42:40:99:61:ca:4b:0d:b0:b0:a1:d6:34:05:83:46:
b1:6c:0e:ee:85:35:9b:a5:6b:66:e9:37:a2:cf:58:f3:f8:f7:
93:f8:b5:9d:90:db:20:9d:57:e4:5f:0b:0f:90:e7:57:8d:72:
dd:26:de:5e:39:89:19:4a:8c:ae:fd:a9:17:00:09:7c:38:17:
0b:72:b2:48:e2:01:49:55:25:b7:cf:72:24:24:95:d3:ee:9a:
f9:49:66:0b:59:81:71:de:a8:3d:01:4a:c3:40:3a:6a:d2:37:
5f:72:ac:74:7e:3f:ea:32:d7:62:31:9e:57:4f:2b:40:52:df:
5f:14:b5:ba:ad:cc:7d:53:85:b5:1b:6f:47:de:74:36:8f:40:
34:6f:22:b7:d8:32:9d:c2:ae:5a:70:87:9f:e6:e8:e7:6d:d1:
b7:5d:70:2c:66:76:45:13:b3:cc:81:6a:f5:7e:fd:f1:ce:e3:
29:f6:cb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:13 2025 by rpki-client