Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NdRfKsW84Vad9rKtgNFvG5L72Fw.cer
File: NdRfKsW84Vad9rKtgNFvG5L72Fw.cer (raw, json)
Hash identifier: AuCSn3MMzGFq+nK3D8AZgcpD06YlQMgC3BU/ZQ8YtQk=
Subject key identifier: 35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB6D4F3ACCADAEA6B3FE0601AFFD16
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203600
IP: 89.47.236.0/22
IP: 185.129.28.0/22
IP: 188.215.56.0/21
IP: 188.215.104.0/22
IP: 2a06:e540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:6d:4f:3a:cc:ad:ae:a6:b3:fe:06:01:af:fd:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35d45f2ac5bce1569df6b2ad80d16f1b92fbd85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:66:e6:ae:53:88:15:01:5a:d1:fa:e3:80:
65:01:fc:5c:2f:8f:27:ce:16:db:2f:f5:ae:ee:3a:
3a:32:fc:94:75:70:52:d2:92:95:9a:7c:74:a8:a1:
99:c2:23:33:16:26:48:f8:df:ce:41:6f:f7:68:91:
52:c3:9d:13:0e:f7:2d:49:96:88:53:cc:05:e6:f1:
fe:9f:10:bd:ec:c9:5d:65:5f:d0:b2:43:76:af:0c:
de:9e:33:48:91:cb:58:4a:55:f1:08:0c:cb:cc:49:
a2:14:ed:56:9c:78:0c:90:64:e0:25:ba:24:56:76:
d1:85:fa:8f:33:24:cc:14:3d:61:00:93:f9:09:83:
e0:4d:98:30:90:af:24:df:0c:59:81:6f:da:ea:1d:
40:2e:af:6f:8a:7f:13:9a:97:5a:e4:8c:e6:4b:c7:
e7:47:0c:ef:5f:e4:c2:7b:f3:23:3c:75:f6:83:f8:
3b:b1:77:ef:58:00:23:41:30:16:e6:91:bb:e7:b2:
b1:df:25:e9:51:5e:a2:6f:a2:55:69:5d:6d:97:5f:
30:2c:70:68:f4:d2:a1:f6:1a:9b:9e:3c:3a:5a:70:
0c:38:a0:87:5a:7b:03:65:c8:df:0f:d6:b8:df:e9:
51:01:d1:39:8f:00:78:96:09:56:4f:ad:c9:4b:f2:
08:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D4:5F:2A:C5:BC:E1:56:9D:F6:B2:AD:80:D1:6F:1B:92:FB:D8:5C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/481236-a06c-4903-9385-6b7d7e4ed701/1/NdRfKsW84Vad9rKtgNFvG5L72Fw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.236.0/22
185.129.28.0/22
188.215.56.0/21
188.215.104.0/22
IPv6:
2a06:e540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203600
Signature Algorithm: sha256WithRSAEncryption
1e:30:da:68:37:e1:28:3d:4a:40:51:41:38:c8:f6:d8:96:00:
45:32:0d:93:c4:72:ab:03:ae:20:7d:60:96:bf:a0:1d:96:0c:
ce:53:5c:9d:65:d8:d4:d9:ad:93:d9:c6:dc:b3:43:d0:e5:d1:
5e:a8:92:89:7d:c5:ab:43:78:eb:f1:5a:da:62:02:1c:67:4b:
d3:cd:dc:c3:14:32:fd:d5:00:bd:a0:6b:94:6d:3d:c0:32:d5:
76:6e:f4:45:7c:29:1d:ff:4f:8e:1c:81:48:39:ce:f9:b5:74:
86:0a:0d:8b:bc:e4:1d:39:44:dc:28:75:41:88:ef:32:9f:3c:
32:2c:a2:00:62:e1:2f:fe:d4:55:3a:16:d2:46:56:cb:94:a9:
83:da:e9:00:34:97:b7:38:ea:5c:ad:f4:93:a4:3b:c8:62:2c:
26:ca:7f:7e:72:18:70:a9:69:60:2a:ce:3a:b1:8a:40:f7:4e:
e0:2e:a3:77:8a:92:40:39:ae:00:8a:2f:3d:0d:e3:d6:b0:d2:
f8:11:7c:81:a7:29:3c:6f:17:a5:1c:70:59:60:7c:6f:13:8b:
48:73:1e:29:db:63:b0:cf:86:1a:0d:e4:e9:e2:75:cc:ec:be:
b0:96:bd:f7:38:8c:ca:ae:66:e5:22:5b:d4:68:29:8e:9d:ad:
9b:84:17:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:32:08 2025 by rpki-client