Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
File: s4-3-dr7t_J8ZSqEbTf7nimODho.cer (raw, json)
Hash identifier: GfF6RFnx5eqgxw809T8msLml/t+edDk9t+Y7v5lkf/A=
Subject key identifier: B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019763BD9D4F3EF6C37F6D46B858F5FDD807
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Jun 2025 10:44:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42986
IP: 194.116.182.0/23
IP: 194.149.88.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:bd:9d:4f:3e:f6:c3:7f:6d:46:b8:58:f5:fd:d8:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 12 10:44:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b38fb7f9dafbb7f27c652a846d37fb9e298e0e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:59:52:2a:cf:69:85:71:70:40:37:d1:1c:6a:
07:cf:c3:9e:dc:90:a5:24:dd:6a:e5:16:16:bd:94:
fc:df:6a:da:6d:3a:c9:5b:70:97:b8:11:59:9d:25:
19:6c:ab:28:28:39:8f:a1:a5:00:fd:aa:44:a8:5b:
32:63:94:24:db:74:3d:2f:46:f7:67:a7:a5:4a:3a:
c6:90:0f:1b:84:2a:66:40:f7:b8:62:87:13:8c:ef:
07:9f:43:0a:33:05:e5:12:21:27:ac:f7:0e:a8:15:
1b:2f:82:bb:5f:4f:8f:d7:66:03:51:23:bc:f2:8a:
20:a0:9a:95:f0:98:50:c8:d6:d9:30:79:0c:d3:e0:
e1:c5:1a:7f:6e:4b:ec:bd:73:4a:5c:14:0a:d6:b9:
ea:a5:ed:45:15:6a:ea:a5:99:ab:df:b9:70:45:fa:
b2:67:98:5e:b7:05:ba:29:96:58:78:4a:73:4b:bf:
e7:2a:a6:ca:9e:2a:76:90:a9:f8:cd:0d:04:f7:f4:
0e:e4:26:aa:c6:f2:3e:af:0c:1a:79:8e:18:c6:31:
15:94:11:02:ff:22:69:18:63:d8:42:8c:34:42:8f:
24:b9:68:81:ed:11:a9:3d:bc:f3:3d:15:a8:ce:7e:
4b:3e:d8:b1:0b:2b:d2:72:e2:1b:ee:2f:ad:ae:cf:
c2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.182.0/23
194.149.88.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42986
Signature Algorithm: sha256WithRSAEncryption
30:c8:15:bf:92:bd:61:e2:f8:70:c3:99:77:e3:82:0a:3d:38:
55:14:b1:d2:0e:52:ed:da:3f:90:16:b5:b8:b4:c1:b6:b6:90:
e3:6d:2c:9e:d8:46:5d:2a:cc:ec:7d:2f:bc:e9:e5:fc:80:2b:
ec:21:97:d5:c1:c7:2d:e8:b5:35:c3:f4:88:28:e7:0d:f6:80:
ce:a7:83:cd:ea:47:c8:fb:17:44:6b:0b:cd:fe:1e:9e:a4:fa:
2e:81:79:df:ad:7e:3c:1c:40:56:03:9d:59:f7:c4:43:a0:93:
8e:9e:0c:a8:b2:b6:90:57:42:77:17:d4:52:e1:08:d3:de:9b:
51:66:5a:78:38:98:7b:97:ce:e8:c9:23:5a:e9:ee:87:a9:4c:
0e:7a:79:1c:5a:b7:33:8d:0a:d6:8d:b8:5b:5d:e3:c3:81:04:
8f:53:8e:98:0f:45:57:fb:2e:88:28:51:38:60:34:42:ba:7e:
9a:33:5d:9a:2c:87:9c:be:fa:cb:92:51:9f:d7:bb:80:cd:a6:
31:6a:87:a7:43:e7:f4:a7:60:dc:b7:b4:7d:b2:a4:dd:1a:19:
98:db:99:ea:a0:2f:85:72:98:e5:20:45:4c:80:28:aa:96:4f:
39:89:0f:8f:2d:e7:d0:ff:1b:a9:91:95:bf:59:db:95:b3:36:
3b:8c:08:16
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:52:31 2025 by rpki-client