Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80YWUeW-JFCXcpdbqYxw7G7jzXs.cer
File: 80YWUeW-JFCXcpdbqYxw7G7jzXs.cer (raw, json)
Hash identifier: Sps3UFbRYKmz/CHXUwe6+ty8srf/wO9QamP4G2f9FqU=
Subject key identifier: F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019788CF3953FDC878900A45D957FB43120B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 19 Jun 2025 15:29:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.140.220.0/22
IP: 2a14:a580::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:cf:39:53:fd:c8:78:90:0a:45:d9:57:fb:43:12:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 19 15:29:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3461651e5be24509772975ba98c70ec6ee3cd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:11:c3:8d:e6:7c:d3:31:6a:cc:c8:8c:6c:
a6:6a:c5:58:66:1e:aa:4c:04:e0:6d:d8:ab:e6:63:
f5:11:d0:da:d0:5d:7f:f1:fe:b4:af:ed:3a:f8:b7:
28:76:63:d2:f7:81:62:e1:32:c6:69:0b:57:4f:eb:
72:4c:2b:f5:c9:ca:47:55:74:7c:98:88:d2:5c:bc:
48:f9:22:25:3c:ff:4c:0c:8f:55:6e:3f:ab:74:df:
81:4a:0d:4c:24:5d:0c:46:b6:ef:60:80:ab:22:03:
4d:d7:d8:92:d3:ea:e9:36:4c:89:b9:2d:b2:33:ac:
82:45:67:63:75:1c:81:45:da:e6:ac:8e:1c:8d:08:
76:09:a5:23:b8:a4:e1:b1:84:2d:81:1f:1f:c3:d3:
0e:81:f0:54:4d:ac:ea:40:c1:7a:2c:6c:2d:30:02:
bb:d4:56:c2:f6:bd:29:a7:61:2b:1d:26:55:58:c5:
af:e9:86:0e:ad:47:12:b1:ee:56:46:8d:3c:e7:2b:
ca:8e:4d:4c:01:27:77:ce:dd:09:aa:17:78:93:5f:
7e:63:51:5d:b3:27:fd:e1:9c:e5:3f:4a:ac:01:26:
c5:66:07:3e:d5:7d:46:1a:9b:04:50:4c:f1:22:0d:
2b:c2:27:35:fd:7a:a3:31:0f:f6:70:9b:a8:22:2b:
e6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:46:16:51:E5:BE:24:50:97:72:97:5B:A9:8C:70:EC:6E:E3:CD:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/df206b-bdbb-4fe0-9f7b-c0ac4e9af3cb/1/80YWUeW-JFCXcpdbqYxw7G7jzXs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.220.0/22
IPv6:
2a14:a580::/29
Signature Algorithm: sha256WithRSAEncryption
83:67:76:cf:da:f5:d5:a2:54:e9:cc:17:b3:ad:0d:2f:37:de:
00:51:bc:05:16:78:1c:b4:9f:df:54:ec:cd:d1:6e:44:2a:48:
73:ed:a9:fe:11:ce:fa:8b:05:35:83:ae:86:46:ff:64:44:b3:
b4:18:1b:9d:63:46:ba:7a:0f:08:6b:12:51:96:08:08:39:dc:
bf:2f:b1:54:71:46:74:46:f3:b2:12:11:b5:97:91:6e:7e:55:
fc:37:b5:33:41:c3:79:6d:6b:68:98:83:61:3b:25:38:b2:fe:
73:74:4f:2d:f8:4c:9c:c7:42:eb:2f:a8:b4:a4:82:14:fc:81:
10:84:b7:90:20:84:ac:6f:40:37:aa:2a:0a:c1:7f:8e:90:e4:
39:d2:b7:fd:86:01:94:07:b3:33:54:cf:77:65:87:d1:c9:85:
26:02:ad:f8:13:d3:d5:66:1b:41:5a:5c:6f:67:fc:d2:80:2b:
ce:d1:89:5a:6b:d3:04:72:58:4a:d3:74:9f:25:5d:10:64:24:
ea:6a:fa:89:5d:04:22:57:ed:36:e3:cb:8d:7a:9c:66:64:a4:
6f:a1:84:a0:96:9e:4e:b0:be:82:c4:b3:58:0c:4c:f4:43:e9:
c2:c7:70:54:66:de:6a:d3:6d:24:64:94:c2:b2:d2:0a:91:c0:
eb:19:5d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 16:03:56 2025 by rpki-client