Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer
File: ztQQ6mhn72P5WbrWshtpHK3_h9Q.cer (raw, json)
Hash identifier: vrfQlJqzflOdMkSPGE2ILgbeujPmxKIVuhiFhn5CSbI=
Subject key identifier: CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424453B88D5C418AB16E872A99330F100
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42053
IP: 45.152.92.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:3b:88:d5:c4:18:ab:16:e8:72:a9:93:30:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ced410ea6867ef63f959bad6b21b691cadff87d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:92:1d:a5:26:34:42:51:7a:d6:61:c2:2b:
3e:42:4a:50:b5:70:27:60:a1:de:03:54:21:d7:5c:
cd:ee:4a:b9:9c:65:2c:b1:d3:a0:6a:39:92:9b:32:
28:81:db:95:ef:46:9f:46:87:8a:b5:eb:43:2e:c1:
a5:49:bc:4b:26:17:c3:88:02:3c:6d:6a:a1:d3:99:
95:bf:08:e0:4c:63:79:c5:a6:7f:06:a7:48:12:78:
f3:63:f4:42:ec:20:c1:27:58:08:2c:9b:61:7c:6a:
65:b9:70:e2:5f:ce:68:d8:e2:33:d8:f7:3e:61:7b:
c0:88:c7:e9:3c:bb:4c:07:8b:3f:e9:23:87:fb:49:
a6:43:76:fd:fb:88:a7:cb:a6:03:b4:15:81:1b:11:
14:4e:ab:14:92:ed:5f:f2:5c:e8:b0:7b:67:9d:92:
60:73:57:ce:55:9a:ca:28:86:18:35:b5:82:2b:4f:
e3:8d:18:9b:ab:57:0b:b8:67:28:f8:9d:6a:30:29:
10:f2:6e:aa:db:95:d2:4b:9f:79:c5:f0:5b:c7:9c:
68:36:82:ea:0a:28:f1:a6:0a:da:70:a1:05:0d:65:
7d:92:e3:f0:02:a5:1b:9f:0f:95:05:ac:fa:22:84:
55:ba:e7:50:21:fa:fc:8a:cd:13:41:71:54:09:22:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D4:10:EA:68:67:EF:63:F9:59:BA:D6:B2:1B:69:1C:AD:FF:87:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/12fc41-89dd-4a21-aa34-76525841dc28/1/ztQQ6mhn72P5WbrWshtpHK3_h9Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.92.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42053
Signature Algorithm: sha256WithRSAEncryption
a3:9f:dc:66:0c:1e:00:b3:ad:44:2a:56:1f:08:44:c3:89:10:
db:e0:d0:28:46:a3:68:1c:89:03:23:df:7d:ef:78:8a:e1:6a:
e6:5b:7a:15:e4:89:8c:0f:a8:39:fc:1d:28:04:89:bf:86:a1:
28:cf:09:3e:0e:1e:5d:95:03:32:ef:29:93:85:5a:76:e0:db:
0f:97:a5:e6:43:a4:f0:8e:b3:e3:d5:b9:2b:38:40:7c:2b:7b:
e6:6d:ad:56:d9:b4:ad:ae:60:59:3d:14:2d:5f:2b:97:39:e0:
bd:01:a3:a9:f4:34:b2:65:ff:bc:21:e7:00:c9:7d:a6:e1:03:
76:ba:d6:e2:df:04:39:54:88:0c:d9:28:71:76:dc:b8:7f:ca:
c6:80:dd:37:e0:32:08:f9:27:21:51:90:5f:6a:25:0f:06:86:
62:f9:53:4b:66:fd:90:03:e0:f8:d6:42:19:9b:a5:ad:08:e3:
81:0e:3b:6e:e2:57:b2:41:49:4a:56:1d:d0:bd:20:e8:0c:25:
cc:65:6b:84:60:07:b2:09:e6:73:31:8a:eb:da:25:0b:9c:f9:
13:17:b9:de:90:3e:dc:ec:da:b1:fe:93:cf:23:69:a4:70:92:
f7:cc:52:d5:e9:e9:e5:18:c7:5c:8d:06:75:60:47:71:82:90:
b6:d0:86:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:42:34 2025 by rpki-client