Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer
File: ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.cer (raw, json)
Hash identifier: WsahhYqZJgoR2VNcwkicIRF7nzW5jeoo21Cqc4Qv/X4=
Subject key identifier: 9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214445B72004CAAF8A1247BF29F64184
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203120
IP: 185.144.180.0/22
IP: 2a07:4180::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:45:b7:20:04:ca:af:8a:12:47:bf:29:f6:41:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ed76829ba6314a035fda799fc0370336657083e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:96:04:72:d5:09:43:0b:78:32:c1:22:9f:1f:
a7:7d:5e:e5:31:13:ba:92:59:fc:29:6c:7f:36:57:
93:bf:2b:d7:af:77:2d:8c:2d:e9:fa:e2:3c:a8:5b:
75:53:4c:03:3a:8c:30:12:f3:be:71:63:f6:36:36:
9e:40:2e:44:2d:2f:9c:f2:98:b9:52:0d:d6:0b:0b:
0e:2c:47:0d:93:51:2e:5f:1a:30:81:1b:45:f7:08:
99:66:da:09:ad:35:2c:67:57:43:e8:32:2a:a8:84:
21:43:dc:f7:3b:8f:4e:69:59:aa:92:23:46:b8:c9:
ac:e1:de:d8:f9:1d:84:c4:38:de:f3:76:f4:08:c9:
2c:f7:b4:b2:74:90:18:8d:26:48:12:2f:ab:60:b1:
83:c2:5c:bd:e3:c6:95:ec:c0:e9:5a:75:99:94:c6:
84:09:3c:3c:3f:b8:5e:ef:fe:8f:b1:12:03:0a:45:
47:a3:a2:89:74:2a:38:4d:d5:c2:12:7c:1f:34:19:
0b:f7:c9:3a:ae:88:d6:64:3c:93:1d:28:6f:92:57:
c7:26:4b:bb:9f:02:56:f6:3b:6d:e5:07:83:0e:a6:
74:f7:ed:27:e8:9c:50:e1:64:2f:57:1c:a5:c1:bd:
d2:97:61:25:2a:86:cc:9f:d0:3d:a2:6f:67:51:cd:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D7:68:29:BA:63:14:A0:35:FD:A7:99:FC:03:70:33:66:57:08:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b5f80d-2a7d-4bab-aaaa-bf264a215b32/1/ntdoKbpjFKA1_aeZ_ANwM2ZXCD4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.180.0/22
IPv6:
2a07:4180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203120
Signature Algorithm: sha256WithRSAEncryption
23:d7:be:8f:a9:e3:de:59:98:4b:22:59:1f:d4:e8:1b:ad:44:
e3:d4:80:c9:4c:f2:aa:aa:40:46:bc:77:e3:c3:57:51:e4:a0:
c2:4f:ed:09:1a:ed:74:ed:67:34:54:28:fc:ce:32:09:0a:f1:
5b:9f:9c:32:32:66:5f:fb:47:14:19:81:7d:b4:04:e3:ce:fb:
02:a6:05:02:12:18:c1:b2:75:01:48:0f:15:d8:0e:c1:d9:0a:
9c:fb:6d:0b:e8:37:4a:af:07:7a:bb:33:90:b4:67:45:f3:56:
7e:ae:8e:38:32:32:61:7a:16:b1:46:44:1b:a0:21:5e:08:a9:
00:60:95:96:b0:0a:31:b6:a7:6c:6d:a3:0d:81:cd:b2:cb:27:
0a:5a:22:51:bd:20:ed:fe:2c:37:72:26:d7:fc:74:5c:03:a4:
ae:bc:1e:36:5d:88:d7:2f:4d:13:4a:e7:38:54:4f:29:51:7e:
0a:87:ef:43:95:6a:1f:90:7c:55:76:68:9f:db:9e:fe:a4:1b:
93:c4:e8:c8:55:f5:72:6e:ac:7d:ab:49:6c:37:16:a3:f3:14:
2d:aa:f7:bc:58:c6:26:d6:d4:43:78:c3:a3:c1:fe:22:c0:c2:
c1:6d:83:c8:ee:62:1b:b5:e6:cc:53:36:3e:c0:e1:f5:68:06:
7c:91:60:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:37:14 2025 by rpki-client