Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jYBF-d8IxTBX6d-ft7eldRA__0o.cer
File: jYBF-d8IxTBX6d-ft7eldRA__0o.cer (raw, json)
Hash identifier: lVaj3RFc1pCKtehSFzaI3z3oZ7xe5ROcBm0FqLy3IPw=
Subject key identifier: 8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01966371A9402789C2E389621EBD45A95454
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 23 Apr 2025 16:18:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.231.76.0/22
IP: 2a0c:4b00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:63:71:a9:40:27:89:c2:e3:89:62:1e:bd:45:a9:54:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 23 16:18:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d8045f9df08c53057e9df9fb7b7a575103fff4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:fd:37:5a:4e:6b:fe:0d:6d:a8:cd:c4:d5:
7f:1f:62:b6:ad:0c:cd:9a:e9:77:3a:d3:fc:5f:a9:
ad:35:84:50:e1:bd:ad:b3:ba:91:32:0b:e6:26:17:
8d:6a:0b:31:18:a8:a9:b7:66:8d:67:a0:a3:29:f7:
5b:4c:2b:e6:1a:17:7e:fb:4b:57:18:c6:92:6a:35:
ac:75:23:53:28:11:e3:ea:49:bb:f8:d3:49:b9:f5:
70:43:42:33:c7:26:f1:ea:63:aa:6e:42:cb:ba:ca:
25:18:5c:52:1a:c9:a1:a2:8a:fc:af:36:21:10:34:
60:2c:58:8e:6b:47:53:57:86:e5:06:5a:f3:2b:47:
e2:8e:e6:34:f9:a1:29:5c:4f:1d:b9:3b:78:b0:d6:
ea:0c:04:d6:c7:6d:c1:ce:2d:03:bd:cb:11:ed:7c:
ea:52:2c:ae:5c:6b:c4:5c:9d:e5:50:33:3d:30:6d:
c2:d0:6d:35:75:ff:60:31:aa:c9:53:13:e6:1b:3a:
7a:4a:aa:fe:fe:84:60:cf:47:9b:a0:29:19:a7:47:
4c:60:09:bf:f6:de:92:fd:e4:66:87:75:03:24:36:
8a:23:d0:f5:86:26:53:0e:4d:16:42:b5:1f:be:67:
c7:07:b8:e5:50:2d:41:fc:68:5e:7d:a1:38:00:f3:
46:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:80:45:F9:DF:08:C5:30:57:E9:DF:9F:B7:B7:A5:75:10:3F:FF:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a671bf-aaa0-4fd3-85fc-821e69413131/1/jYBF-d8IxTBX6d-ft7eldRA__0o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.76.0/22
IPv6:
2a0c:4b00::/29
Signature Algorithm: sha256WithRSAEncryption
8e:b3:ae:7e:f8:16:05:16:19:c0:5f:a7:cd:10:74:9d:25:57:
d3:7d:fe:f2:f2:62:e7:65:24:53:d9:14:b4:a1:81:50:fe:95:
00:8c:da:4a:a6:5a:b3:c2:0f:65:3a:88:65:d1:a0:70:de:c8:
be:68:c0:fa:97:0e:73:02:ab:a8:0c:1e:04:0a:4d:9b:8f:c1:
39:7c:15:33:d4:2a:09:40:a0:6b:ad:8b:67:0c:05:6d:77:de:
80:ea:bb:b2:70:ce:07:74:f2:fe:2a:a4:a9:f3:83:47:3f:eb:
4e:cb:b7:93:6a:62:9a:c2:29:cb:e6:b3:6f:de:6e:f4:e1:2a:
a9:21:8b:56:0f:71:c0:a1:5c:7a:f4:0a:12:fa:82:fd:6b:fb:
b8:00:63:5b:4e:7f:46:9e:d6:4b:fd:d7:d1:77:68:92:76:cf:
0b:e2:bc:30:28:ee:47:0f:2f:42:4c:08:a8:15:42:ec:0b:9c:
70:00:09:9b:41:1b:a2:e7:a4:d1:a8:e3:5d:a1:7f:27:b8:02:
72:5b:b8:86:f0:94:eb:ed:53:a0:52:c4:25:c6:eb:8c:5f:71:
d5:b1:f0:1f:9e:ab:92:35:84:c9:ee:70:fb:8c:9a:ef:c6:89:
1c:f2:2d:3a:41:0a:43:dd:7a:da:d2:46:1b:09:c1:63:b0:0d:
bf:f9:a0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:07:59 2025 by rpki-client