Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2nf6EA1s0ojlRMfLTH1NGIeQee0.cer
File: 2nf6EA1s0ojlRMfLTH1NGIeQee0.cer (raw, json)
Hash identifier: 13USHC/gK3ymUMA4fI2rfWo5GaHiuBy03M0F6keJo+c=
Subject key identifier: DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01973115DF0CA50149B728F20366F427252A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jun 2025 14:40:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213450
IP: 185.134.4.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:15:df:0c:a5:01:49:b7:28:f2:03:66:f4:27:25:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 14:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da77fa100d6cd288e544c7cb4c7d4d18879079ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:9c:b9:9c:3f:05:4f:74:ce:b3:94:86:27:
14:06:4d:c7:8d:78:3f:7f:8b:b6:51:88:b0:0f:83:
a9:44:f1:93:7d:d1:85:ad:60:c4:17:99:ee:a6:f0:
95:f1:80:6b:c2:f4:dc:62:82:9c:7d:fb:e1:45:65:
76:d8:97:d7:80:dd:a5:57:b1:1b:8d:e1:d4:f3:0f:
f9:d9:38:d9:34:23:56:c2:ff:d2:44:62:c2:c4:2a:
fb:8c:33:cd:81:3c:d7:a1:03:1b:6e:57:e2:88:a7:
c1:e1:31:35:d0:c2:53:eb:d5:8f:3e:a2:32:07:24:
14:61:4f:aa:06:2f:53:0d:9e:0d:3e:69:9f:f2:67:
8a:57:b0:c3:95:26:2c:b1:c4:9d:f6:e6:08:8c:78:
d5:a5:f2:54:70:cf:13:f0:ec:ad:be:3c:22:1b:27:
bc:5e:10:f8:18:a3:77:0d:08:e2:d7:61:a0:fd:7b:
40:8c:c0:8c:e1:39:a5:9b:38:0a:9a:6d:d9:ac:d1:
51:be:25:92:ac:aa:d3:ee:7d:0a:d9:5d:18:0c:bc:
28:76:81:01:cf:f3:1f:ec:43:bd:f5:19:05:74:0c:
51:8e:9e:04:f0:f0:8c:83:13:c4:e1:a9:a9:29:50:
09:1a:fd:74:0b:03:14:e8:6f:d0:9c:d6:9f:69:e1:
9c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:77:FA:10:0D:6C:D2:88:E5:44:C7:CB:4C:7D:4D:18:87:90:79:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e31ad5-ef74-40a4-9a0d-df872fb269cf/1/2nf6EA1s0ojlRMfLTH1NGIeQee0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.4.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213450
Signature Algorithm: sha256WithRSAEncryption
36:ba:bb:bc:b9:a1:f1:8d:9c:db:f1:e8:31:ce:8c:78:26:97:
29:1a:33:d1:9e:5f:6a:3d:e6:4d:2a:c1:3e:73:52:6b:6e:09:
b0:65:dd:8c:f8:53:c6:60:4d:ae:0d:5e:43:62:6c:b8:27:e5:
fe:80:12:57:d3:8a:3a:d0:04:62:a4:ad:ec:1b:55:40:d8:d6:
7d:c5:aa:d4:40:c3:83:43:cb:cf:83:04:6d:57:d7:dc:f6:ac:
09:07:d7:32:fb:9e:36:52:a1:6a:e8:35:2e:a0:b7:2d:02:4c:
ad:4f:2c:d2:9f:8d:1b:be:b8:a8:68:e6:7f:17:3f:28:b9:4b:
01:f1:26:be:14:2e:84:81:ba:38:57:14:85:7d:ce:d7:cd:c8:
d7:18:d8:69:bd:a4:cc:c5:fc:ac:97:8f:7d:26:0d:ad:d6:4e:
23:ef:95:76:9b:06:df:35:7b:9c:f5:80:11:a6:e4:17:72:2e:
85:66:6b:ce:b1:f5:f0:b2:47:92:9a:0d:2b:33:70:7b:1f:a5:
d6:42:80:d1:ed:a4:47:da:ab:32:fd:f5:64:0d:d6:3a:b5:c9:
ba:c7:62:c4:ac:13:7b:57:79:e7:ef:9e:cc:70:ce:12:a8:30:
62:e8:3d:dc:e0:7f:2b:a2:44:eb:8b:b5:29:20:1a:f3:a5:ce:
de:20:c8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:36:30 2025 by rpki-client