Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer
File: VVvz0dRYglh_O_uidLL4uaRbyJk.cer (raw, json)
Hash identifier: cQ9fGe8g3hgKrQ+FOQV6TCLwB04NwE0Z6Qi/1+f8wIw=
Subject key identifier: 55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019661B873D3C32A8D7500B28F00781F2C27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 23 Apr 2025 08:16:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 109.205.196.0/24
IP: 185.75.178.0/24
IP: 2a14:ea80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:61:b8:73:d3:c3:2a:8d:75:00:b2:8f:00:78:1f:2c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 23 08:16:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:05:36:60:ae:26:1f:37:d5:04:79:18:21:
e0:20:12:68:14:a4:41:6b:57:bd:b1:39:66:e3:ff:
83:c3:0e:e7:a7:b9:2d:14:10:3e:89:5b:9b:51:06:
02:6e:93:23:cf:05:ed:7e:cb:84:b0:8e:51:12:c1:
de:97:a4:67:ee:df:3b:67:81:93:45:2f:8c:89:af:
a4:31:c6:bc:17:6b:52:12:8b:02:67:95:cb:ce:2e:
7b:90:1c:ad:a7:48:70:dc:46:a0:85:c0:e2:4d:92:
31:34:b8:71:5f:c2:aa:8b:5d:c1:43:92:cc:f0:31:
f4:e1:33:32:28:c7:60:c9:a1:cd:db:1e:d6:25:ca:
c1:72:75:e7:bc:b3:e2:b2:34:c2:5f:50:3b:19:01:
d2:7c:93:cc:4f:d1:85:78:fb:02:16:07:c4:29:49:
69:89:91:a5:4c:c5:86:f0:03:3e:67:9f:7e:0f:2a:
7b:de:f9:33:f4:fe:77:fb:78:25:88:1d:06:dd:58:
d4:32:47:e3:21:67:e2:73:c8:a7:a7:ee:cb:13:be:
b9:93:36:21:4b:19:62:3c:ce:86:d0:b1:79:19:e9:
1f:87:1b:70:e5:bc:90:e2:22:b3:df:97:2a:9e:e5:
cf:67:c8:fa:cd:72:6b:7a:4b:d1:75:13:29:05:07:
4f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.196.0/24
185.75.178.0/24
IPv6:
2a14:ea80::/32
Signature Algorithm: sha256WithRSAEncryption
81:ce:d4:fb:48:ba:5c:44:d0:6f:4a:3a:1a:30:31:e7:eb:ff:
4d:74:ea:dc:05:6a:83:08:24:b6:99:b6:e0:db:20:f2:55:9b:
de:1d:22:af:94:94:ff:bd:3d:45:3d:38:8e:bb:6e:e7:58:94:
89:b8:6e:08:64:05:c0:1f:26:f4:29:ef:74:66:0c:56:a3:1c:
78:0c:a8:6b:0f:47:53:c5:79:eb:87:41:b2:7f:66:f1:db:1c:
4f:1f:53:86:32:1e:86:fa:60:a5:f9:52:14:8f:62:2f:a1:07:
76:27:7a:a5:87:f5:1b:db:a3:3f:86:f1:e1:b5:b0:02:37:87:
f8:58:8b:52:f0:fe:36:c3:11:1f:39:8a:f0:29:17:51:2e:43:
50:96:82:cc:c4:7f:fe:f6:ac:43:64:c8:35:57:21:5d:35:e6:
3c:80:9f:61:71:c9:49:e1:2c:b2:d3:c4:68:c3:bb:d0:50:c3:
7e:38:8a:1c:08:58:7c:ce:f9:80:29:82:6d:04:98:2f:f6:e7:
50:79:15:e1:9d:8e:07:e1:8e:29:ff:99:72:7d:ba:45:61:7d:
5f:67:59:d0:04:b9:1e:86:0b:f8:ca:74:23:29:6a:76:2f:fb:
06:3a:a9:54:9c:ac:c4:0c:41:9f:62:9b:3f:0e:4b:28:f8:85:
18:b1:73:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:34:04 2025 by rpki-client