Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NPWeovpHqdYxGxyMxahqW5oOR6c.cer
File: NPWeovpHqdYxGxyMxahqW5oOR6c.cer (raw, json)
Hash identifier: DQA6yKrZqsMjlEECJSc3M5FOXDKSNuUI9JUvicKuBsA=
Subject key identifier: 34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5AE54912CFA5B4467992ED2A57C82
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25089
IP: 194.107.142.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ae:54:91:2c:fa:5b:44:67:99:2e:d2:a5:7c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=34f59ea2fa47a9d6311b1c8cc5a86a5b9a0e47a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:7e:f4:f3:32:fe:0b:89:87:c1:0f:fd:1f:
2e:9a:cb:70:14:e8:e1:01:b6:df:e2:f0:27:a8:90:
66:22:bd:27:d8:a7:08:e2:1d:33:ff:97:3b:20:66:
34:31:9b:1a:99:6a:91:5f:d8:92:c8:86:53:5f:21:
32:91:2b:60:33:fb:56:d1:ea:94:f9:c9:3f:ee:27:
12:a2:12:9f:d0:7f:4a:ec:51:20:7e:af:dc:89:ca:
46:26:da:1d:ca:89:93:ad:6d:29:17:32:80:bb:9a:
a6:69:4b:1f:e3:54:ba:ab:6a:68:98:0a:33:84:a0:
5d:ab:4c:41:58:93:0e:20:ab:bb:28:25:d2:31:b0:
ba:54:f0:22:1c:74:c5:ce:eb:07:28:31:75:cb:d2:
28:77:22:12:7a:64:5b:42:93:66:61:2c:dc:1a:ca:
d0:fc:52:34:cd:a1:a8:ff:f2:8f:16:53:7a:c7:c6:
bc:b6:85:cb:f6:18:3b:18:f8:05:09:72:a2:34:35:
b9:45:83:6b:6d:12:14:0e:73:f0:5f:ba:29:27:fc:
74:d3:08:2b:d8:61:ce:0c:59:1a:bf:1d:50:8c:2c:
18:a5:95:a5:a5:63:13:64:11:65:1f:92:ac:70:02:
6a:03:b6:68:6a:56:43:f6:6b:97:3a:1f:fd:7d:ec:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F5:9E:A2:FA:47:A9:D6:31:1B:1C:8C:C5:A8:6A:5B:9A:0E:47:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f89c9e-3e9a-41ba-9b45-35614e9178fc/1/NPWeovpHqdYxGxyMxahqW5oOR6c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.142.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25089
Signature Algorithm: sha256WithRSAEncryption
28:eb:ef:b5:06:52:87:74:aa:93:52:ae:76:75:ad:13:2a:a7:
0e:d7:84:49:10:49:c2:d0:22:9d:2a:71:07:75:ce:b0:be:6d:
9a:d9:bd:b3:50:d3:f0:7a:55:86:a6:ba:4f:de:a2:05:96:2a:
8f:39:24:a1:d9:52:37:1f:42:ee:d2:28:23:7c:d6:94:b9:2e:
06:27:3f:6f:b3:54:fb:70:c1:a0:3e:fe:84:89:75:13:e4:68:
a1:da:fe:94:c4:d9:cd:e1:c6:61:93:43:7f:9f:b8:4b:f9:32:
07:2b:64:07:65:e0:08:28:b3:1b:44:c5:3d:3a:c7:ab:6c:83:
f2:38:01:00:2f:42:ba:e3:79:7f:99:17:0e:be:36:62:67:bd:
87:80:d6:be:65:5a:79:15:c1:6e:bd:a1:da:24:b6:19:f9:f7:
8d:de:63:97:ac:9e:6a:35:fe:a9:89:b0:12:73:e2:a4:9f:93:
e8:81:39:13:32:ee:0c:c6:0d:12:84:ae:69:b7:62:b3:7b:dc:
a5:31:f9:9a:d4:e8:d2:ce:48:77:4e:5c:99:2c:cb:dc:49:17:
cd:05:35:2f:82:5b:23:8f:5f:37:53:2c:4c:81:53:f8:61:11:
14:ff:77:b6:d1:54:8e:d0:4e:82:0b:7b:0f:82:0b:3e:9f:fd:
0c:ae:e3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:35:08 2025 by rpki-client