Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer (raw, json)
Hash identifier: AzxZtXTqIqnzAQip6U4V+/yukt8kwpTdbqEue6E5+5Y=
Subject key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F9D49F2CA14C4DF69629FFE674DE6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 30736
IP: 82.103.128.0/18
IP: 2a00:9080::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9d:49:f2:ca:14:c4:df:69:62:9f:fe:67:4d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:11:23:f8:b2:cf:97:61:3b:1a:50:77:56:84:
6d:df:c8:cc:99:f0:2e:d6:fe:b9:12:3c:0e:4a:c3:
c9:e9:e7:ec:9a:ac:02:43:8c:22:8a:d9:16:46:8c:
3a:c3:c7:ec:a9:60:11:aa:29:ef:05:58:e1:2c:c1:
cb:ad:7b:75:63:64:45:85:d5:ba:98:3b:5d:5d:15:
92:5f:63:39:1a:23:ab:c4:58:22:83:72:14:74:29:
83:e2:03:cd:60:dd:d4:4c:95:b7:25:57:b0:c2:d0:
4c:fe:4e:f0:ed:59:4c:67:04:e2:1e:80:18:39:01:
f7:28:cc:67:94:b0:7e:d6:e7:8a:db:1e:1e:fc:97:
03:55:07:38:6c:7f:b0:86:8e:51:f4:83:f2:f4:c4:
4d:6f:e1:66:f7:ff:01:20:af:5e:b7:d8:34:c9:a8:
bb:8f:dc:27:7b:d5:24:c3:a0:71:5e:5e:36:23:7d:
e1:fe:da:cd:32:15:7b:59:fe:3e:78:1d:89:91:e1:
f0:da:39:37:5b:90:a5:36:6c:1f:33:68:33:12:6f:
bc:95:17:a1:65:16:f3:73:67:0e:aa:46:7e:3e:ec:
96:0f:11:47:01:e3:a7:64:75:0c:4e:b9:64:d2:94:
34:cf:68:ec:ec:5f:67:0d:a9:6e:98:4c:23:d3:b2:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.128.0/18
IPv6:
2a00:9080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30736
Signature Algorithm: sha256WithRSAEncryption
19:85:c2:9b:93:30:ca:7b:e9:64:a4:ce:62:da:3a:54:9d:2f:
be:fb:ba:08:c9:27:a7:4c:fc:91:ce:a6:50:46:b2:ea:e1:67:
b3:8f:c1:77:cb:28:5e:78:d5:63:e8:a9:0f:77:9b:67:15:4e:
12:d9:ac:f2:3a:29:ef:43:f8:16:ed:66:21:26:94:ec:31:83:
de:5a:fa:f3:ee:c3:33:aa:8e:c9:bd:a6:b2:d4:aa:39:b4:67:
5e:53:47:38:e2:36:02:ac:58:70:24:4b:92:a4:1c:aa:a0:e8:
27:c4:76:a2:35:99:7e:47:38:eb:d6:31:46:95:61:45:17:89:
61:cd:90:df:2d:26:36:ed:2f:24:4d:10:7b:bb:94:80:e9:de:
b1:dc:c7:bd:4c:cc:a2:73:a9:a5:34:f7:ed:ab:3f:94:60:ea:
2b:b0:08:e1:1a:51:8f:fe:5d:f6:9d:e1:28:75:09:0d:8e:94:
c3:6d:90:40:40:35:32:9a:9a:a4:81:bd:51:e7:3c:b2:b6:35:
b3:97:67:1d:dd:9a:b1:56:2f:bb:c5:fa:41:6a:ef:cc:79:5c:
55:5f:0d:78:0e:f6:7c:78:18:48:76:54:ce:c2:46:02:b7:a4:
d7:a7:7f:d2:8e:8e:b6:38:08:f0:6f:4a:d1:d1:fb:86:c7:d7:
15:aa:63:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:20:20 2025 by rpki-client