Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
File: nJGTyUKgcOtue3bTPBFwwauqq8A.cer (raw, json)
Hash identifier: JHFRT7vuK1egyfkvf+D+bkspt+L08MsK+EkI/a3fRBI=
Subject key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019652F7B0586994F016C2FC4D3FC3920119
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 20 Apr 2025 11:31:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.36.93.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:f7:b0:58:69:94:f0:16:c2:fc:4d:3f:c3:92:01:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 20 11:31:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:1f:b3:c9:3c:ca:eb:26:df:7a:5b:cc:49:
e8:6e:16:ab:ed:a5:3d:cf:64:68:fc:ef:c7:72:38:
0c:14:eb:45:e2:e0:11:1f:e0:4c:8c:ae:15:9d:d0:
01:ce:59:eb:d2:1d:f2:52:7c:c3:a5:48:fa:f6:3c:
7c:7f:7f:43:f7:0a:04:7f:71:70:38:7b:f4:e3:c7:
b7:61:6c:30:eb:dc:fb:2a:7f:fe:bc:11:0e:52:f2:
ef:7a:bc:e8:a0:0f:d7:25:8b:55:a6:c4:23:fc:7d:
bc:1d:13:c5:5e:5b:0f:7c:b0:9b:8e:09:42:ae:75:
67:9b:56:43:d3:b9:b8:65:cb:99:db:a3:57:6e:28:
63:64:ca:73:38:7b:6f:29:6b:4c:4a:5f:df:fc:a2:
e0:2d:c6:91:b6:c4:24:a1:80:ba:3d:66:c2:bc:5f:
5e:55:5e:d8:7c:82:eb:f9:a4:33:b1:c9:31:10:84:
43:11:d5:8b:83:bb:2d:1e:8d:6a:03:14:79:3e:a7:
bd:ac:81:93:cc:70:20:cb:2d:5d:48:48:82:ce:c3:
6b:18:b0:47:ce:1e:39:7f:62:2d:aa:5d:57:f1:d4:
3e:1b:c6:b6:78:4f:18:50:71:b1:3f:80:04:01:76:
9f:de:85:d7:39:69:e2:5e:59:62:83:55:b2:dd:65:
2f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.93.0/24
Signature Algorithm: sha256WithRSAEncryption
62:f9:fa:cb:ea:62:42:34:ba:72:44:16:c2:c0:13:38:f6:ac:
87:18:83:b1:00:1b:ac:2d:2b:8d:5b:21:dc:1d:37:57:48:bd:
b4:f3:a9:2a:7d:9f:76:d4:f7:3e:4c:2d:5c:86:0d:82:00:82:
23:95:bf:5e:d7:c1:05:63:e0:84:39:a5:26:9f:e6:ba:18:30:
7b:d5:50:81:84:98:13:98:fb:f6:9b:18:77:96:40:99:ca:54:
f8:62:15:14:77:87:ab:16:40:ea:1f:2e:62:31:13:9e:32:ca:
55:1f:65:88:6d:25:8a:60:2a:38:f8:ca:12:1b:80:c2:5d:77:
f9:59:55:47:2d:65:3e:12:df:38:3c:31:9d:7c:45:ba:a7:df:
8c:b9:bc:bf:e9:0d:76:67:5f:48:3e:9b:f9:07:50:fe:18:9f:
45:5b:53:58:33:99:7d:7b:c3:b3:1d:ef:cb:1e:72:b9:a0:b5:
86:37:08:ea:06:09:98:c0:10:4d:3a:56:eb:54:05:73:82:d5:
4e:cf:51:9e:e6:76:af:21:6d:2d:77:93:a0:0c:8d:d6:03:df:
4a:c9:1f:66:57:f3:c3:d9:ab:e3:d5:84:44:9d:67:0f:71:70:
c7:26:de:7c:13:81:71:45:68:14:ae:13:66:5b:d9:df:d7:b0:
a9:a9:39:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:45:15 2025 by rpki-client