Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer (raw, json)
Hash identifier: UrRPix35cpDYUdXrp4G7opx8mxBFP97/yyO6jizY8Lc=
Subject key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422203732634BE2C86F13E16889A3B2E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208653
IP: 5.183.136.0/22
IP: 2a0e:dc00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:37:32:63:4b:e2:c8:6f:13:e1:68:89:a3:b2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8a:5f:ea:1e:a9:cf:60:01:3e:72:92:5a:9a:
9e:b7:3a:39:ed:99:69:36:74:c8:91:10:0e:b2:10:
f4:d9:40:78:f4:b6:69:f2:ba:64:90:c9:cf:e7:80:
a6:88:8e:ab:53:f2:11:b2:59:33:5e:e4:dc:79:95:
06:52:d6:0c:1e:70:b6:09:0e:8f:74:c5:b1:58:2e:
6b:01:25:8b:dc:6a:16:4a:f7:34:df:87:4d:7f:d6:
bc:8f:db:78:8b:0c:71:18:26:0a:1f:3e:a8:ab:20:
b9:76:8d:7f:4f:36:98:90:ba:e5:34:29:d6:36:3c:
45:94:81:d6:91:a2:0f:3c:63:c5:0e:50:9e:94:d3:
dd:f7:02:d7:1e:4d:02:f3:58:cd:35:93:d4:7f:31:
ec:ec:c5:3d:97:cb:c6:34:64:51:31:af:01:2e:aa:
8b:40:f8:a1:b9:c8:96:cb:1c:45:86:c9:9e:8e:ba:
86:d6:ed:32:be:24:be:fe:c7:28:fa:24:c8:d1:37:
e6:e6:b6:f8:a7:2c:87:29:d5:83:97:e1:05:1e:06:
a5:1f:d0:1a:0c:3e:3e:9c:63:76:10:fe:d2:6d:73:
00:74:31:3c:71:73:d5:9d:bb:7c:6c:10:50:62:68:
4a:8c:18:0f:4b:5d:ce:d9:5f:11:f4:ad:ed:ed:72:
8b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.136.0/22
IPv6:
2a0e:dc00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208653
Signature Algorithm: sha256WithRSAEncryption
9d:2d:69:ce:ec:a1:80:52:5e:83:8f:e6:28:19:77:c8:76:40:
7b:9d:f3:81:7a:80:5e:d2:53:5b:c5:af:a8:58:4d:36:cb:77:
2c:c6:7b:31:f5:93:ae:33:27:e6:48:3d:60:6b:91:69:65:9a:
30:d8:85:5a:7f:5d:fa:46:a8:6d:4f:c7:ea:31:28:fd:dc:19:
39:45:4c:f6:3c:d7:8f:a8:2c:1c:2a:ba:b0:5e:6e:7c:9b:9c:
96:37:15:e8:eb:06:07:4c:8a:22:8e:fa:45:0a:f5:19:c8:e7:
f4:b8:6d:12:51:4c:ab:2f:40:53:39:37:e7:27:fd:87:a4:8e:
74:9f:3f:87:f6:4e:d3:ba:e6:17:91:dd:f8:88:f8:38:06:2c:
c2:79:b9:45:19:44:e9:06:f9:d4:dd:67:3d:2e:4c:9e:d7:07:
e1:98:12:7e:24:5a:65:9e:69:a4:c9:ec:b5:e6:93:70:80:e2:
fa:9c:e9:8d:4e:1c:50:e5:5c:58:8f:fd:41:e3:69:e9:8e:4b:
1b:be:c0:fb:92:19:79:a1:5a:5d:57:40:58:0a:a7:92:01:90:
e5:79:b7:d5:05:b2:52:12:c4:46:95:8f:67:a6:4e:94:0a:31:
0a:87:c5:7c:57:8f:dd:20:3d:63:44:e4:65:c0:0c:53:0a:6f:
71:db:0b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:13:58 2025 by rpki-client