Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
File: iB4xmT-oWHVos_zeW3_ulttDqbc.cer (raw, json)
Hash identifier: M0wwk5WpdBy9oQhq8Vp7ZIyhzUS5orTREowRtALADtk=
Subject key identifier: 88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01967C1CD150399CBD3F3324C19EF74D1BE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Apr 2025 11:16:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49051
AS: 214866
IP: 94.143.229.0/24
IP: 2a12:5d80::/29
IP: 2a14:50c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:1c:d1:50:39:9c:bd:3f:33:24:c1:9e:f7:4d:1b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 11:16:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b2:fa:d1:f6:e2:d0:dd:db:ee:6d:91:82:89:
27:7c:31:01:27:ae:07:8e:74:1a:6b:86:56:bb:f5:
6f:90:15:b2:42:74:6d:a2:9b:07:f0:22:6b:8f:15:
ac:46:19:e5:63:ef:d4:64:9e:8b:f5:8a:52:67:25:
6d:03:cb:ab:fd:c7:b2:0a:bf:3f:0f:d3:a4:64:08:
e9:bf:a0:e4:21:d7:0b:18:2f:5d:b0:ab:88:7d:67:
ff:b4:38:12:1d:2b:1e:ac:72:ba:c0:3f:a2:3d:0e:
b4:5f:6e:f8:1a:76:10:4e:80:1c:c6:30:a3:bb:42:
59:1b:d6:32:bf:5e:27:3a:6d:26:f1:b2:0b:ba:60:
f4:a7:dd:fe:22:47:b1:07:d1:53:23:91:3b:29:4b:
21:55:64:93:df:61:94:81:4c:4a:4c:ff:a6:a0:a0:
48:e9:ca:73:a6:0e:33:88:62:2f:cc:0e:59:b8:da:
df:91:f5:c3:06:5f:6a:b9:a8:59:cf:7e:99:61:59:
5e:31:ca:5e:11:24:9e:b0:3b:12:36:65:e9:f2:eb:
de:5f:10:e2:88:bc:f9:ca:b9:0d:ec:6c:b5:cd:6b:
03:4e:82:47:56:8e:66:30:b8:1f:74:1c:65:21:f1:
1a:9f:25:0b:2a:35:aa:95:24:a6:18:bf:1e:7d:e9:
47:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.229.0/24
IPv6:
2a12:5d80::/29
2a14:50c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49051
214866
Signature Algorithm: sha256WithRSAEncryption
26:e6:e4:ef:bd:2d:4c:79:0a:2a:8e:9c:c3:af:17:72:14:fc:
82:e3:c0:30:80:d0:5a:bb:bf:47:02:ed:51:d8:d2:40:fa:0a:
25:da:a0:7f:f5:01:10:45:5a:3b:bd:15:0a:77:a6:4f:c1:be:
8c:cd:22:9a:53:73:3d:40:38:bd:59:14:96:fa:c6:f2:93:32:
24:ac:ec:25:67:9b:5c:83:bc:49:76:4f:1b:6c:d1:ca:4e:c5:
aa:a1:75:4e:27:f3:b9:4e:02:13:71:3e:11:35:f3:09:d5:b4:
cc:cf:98:f7:24:34:50:45:37:f3:1d:10:d6:8a:d3:5e:dc:9d:
c0:96:a6:f1:ac:f6:1d:42:67:8a:9f:60:ce:16:5a:86:9e:3f:
8f:9d:c9:45:5b:67:d9:35:8c:63:d5:e7:31:e0:ad:7c:3a:8b:
6d:b7:29:dd:dd:7b:a5:dd:44:e5:d6:71:12:07:84:29:84:5e:
c9:f2:1b:e6:7c:c2:79:31:d5:d1:75:07:1c:e3:da:42:70:2b:
68:59:85:fe:78:4b:29:23:ec:8a:49:47:48:ae:17:d4:07:76:
6d:8e:8c:86:f2:89:7f:35:0d:94:e2:fc:ef:cf:15:e7:f0:ff:
f8:bd:97:bc:a5:25:1a:71:f4:d9:95:70:82:3c:72:1c:c9:5f:
b6:8e:27:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 00:06:34 2025 by rpki-client