Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u4N41EQt9p9H3A6lgqErKrUUvg8.cer
File: u4N41EQt9p9H3A6lgqErKrUUvg8.cer (raw, json)
Hash identifier: o+Co/Xby0af1N8uWDf9jV9GVncJvyuiJJ/Az9+umcJ4=
Subject key identifier: BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019661A262989D3D74BA9AE73BC297A62408
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 23 Apr 2025 07:52:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39019
IP: 185.204.100.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:a2:62:98:9d:3d:74:ba:9a:e7:3b:c2:97:a6:24:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 23 07:52:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb8378d4442df69f47dc0ea582a12b2ab514be0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:1a:bb:fb:c2:a8:01:2b:45:12:7b:28:22:
6c:8b:24:ec:26:98:57:fd:4a:7d:c6:a1:13:57:c3:
cf:63:24:c3:da:4e:2f:96:96:1d:ae:81:0f:55:83:
08:6a:d2:f6:a1:40:b3:0e:c2:f2:0c:70:55:08:e9:
59:8f:81:dc:f7:38:a4:f6:f0:04:5d:da:d2:4f:53:
9d:e8:67:3a:fa:3b:87:55:a3:3b:e7:f4:9c:ef:28:
ef:da:84:ca:e4:cb:d0:7c:99:1d:19:d9:93:60:d7:
34:70:0e:b7:b7:9b:d6:bd:73:d5:10:c2:c6:41:4e:
1f:c9:c0:61:13:06:44:53:4b:da:70:3a:2d:88:74:
84:3f:e9:2d:9b:79:3f:14:86:7d:41:50:be:69:d9:
19:bc:74:56:48:09:87:d9:67:fa:a3:ff:b0:c1:34:
31:3a:16:6f:36:2d:4a:23:dc:b9:64:7b:33:85:ed:
2b:37:fa:4e:b8:4e:ab:23:97:b5:ad:e5:e2:17:99:
38:fa:0b:7b:2a:50:d6:68:cf:39:d1:43:57:02:6f:
79:ed:e8:86:63:6c:79:ce:11:02:7f:55:a0:eb:93:
23:ab:c4:9b:26:cd:55:b4:d7:bf:f3:ca:a7:fe:7d:
54:9d:55:32:b7:bf:6e:66:63:c5:50:55:3c:73:a3:
49:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:83:78:D4:44:2D:F6:9F:47:DC:0E:A5:82:A1:2B:2A:B5:14:BE:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1db0d1-aa93-45c0-9889-d8a555c64214/1/u4N41EQt9p9H3A6lgqErKrUUvg8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.204.100.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39019
Signature Algorithm: sha256WithRSAEncryption
15:4a:0b:43:53:ec:88:bf:45:9c:0d:ba:4a:0e:bf:c1:28:28:
50:09:6a:4d:18:6a:a4:0e:99:ae:e5:c8:bd:6f:62:a7:46:04:
86:f5:55:e4:c2:d0:72:f6:b4:ad:5a:99:1a:52:97:12:1b:ba:
b6:9f:59:9e:86:38:f3:1e:b3:cc:77:5d:44:a4:78:57:2b:c3:
3b:61:8a:4a:40:76:ad:84:b5:fa:ea:1d:f9:6e:cf:a3:b9:62:
3e:ba:b9:65:e3:fb:af:c3:ef:fe:7d:8d:70:e6:03:9d:a5:32:
19:8f:6c:b3:3f:6d:3c:92:1d:79:fc:a5:1f:85:d8:1a:53:91:
2a:67:92:2a:57:b5:9e:9b:9e:9a:38:41:ac:23:bb:40:3d:b1:
47:ad:dd:6f:d4:09:1d:eb:22:c2:a8:64:3c:b2:71:2f:29:80:
b5:82:e6:9c:d5:cd:11:1c:77:d7:5b:f2:4e:0d:c4:9d:98:b5:
ff:28:0d:ad:e8:7f:55:6c:f2:24:3c:6b:ad:27:b3:c6:b3:a6:
02:d4:a0:da:74:82:f3:9a:ee:80:e6:76:1f:c0:65:f7:3c:e0:
d4:5d:5e:06:a7:d3:32:52:d3:6d:26:3b:86:cb:29:6b:9e:db:
10:f5:d3:33:ac:69:c2:6b:1a:71:4a:90:aa:1e:e2:f1:67:81:
82:0b:14:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:05:48 2025 by rpki-client