Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer
File: 6_Ngh8P87PsAb1GNeBGyVepXyQ0.cer (raw, json)
Hash identifier: s48LMkl3KxdDiwBzgOSQ443PxgVqFS0C86Pmi00kqBg=
Subject key identifier: EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143F2889072ED2ECB04B1CD2ED461D9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203712
AS: 206265
AS: 209581
AS: 212078
IP: 37.18.132.0/22
IP: 83.136.176.0/22
IP: 83.229.33.0/24
IP: 83.229.38.0/24
IP: 185.126.104.0/22
IP: 185.188.208.0/22
IP: 185.230.107.0/24
IP: 2a0a:7040::/29
IP: 2a0b:cf80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f2:88:90:72:ed:2e:cb:04:b1:cd:2e:d4:61:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebf36087c3fcecfb006f518d7811b255ea57c90d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:39:ef:d1:4a:84:86:63:ea:f1:cd:5f:ad:
97:84:5e:2d:96:9f:d3:83:f3:bc:e3:72:4a:b1:a4:
49:90:e7:5f:ef:da:87:7d:1d:0d:19:0c:61:a7:f3:
0a:2a:3a:5f:b0:cd:be:49:03:fc:2f:b8:ab:1e:7e:
4e:eb:08:ca:58:71:f6:ce:ff:3a:d1:c3:75:eb:29:
e3:e9:3c:e0:8c:9c:27:89:fb:60:b5:20:33:d8:17:
86:22:5e:c4:7d:e0:76:c4:78:cf:b3:ca:a0:6d:39:
b1:5a:80:b4:9b:5a:dd:57:01:fc:83:5c:0e:ab:1a:
43:20:46:b1:ee:84:3d:f0:ea:36:29:d0:ed:ba:79:
f2:1c:92:0d:e1:6a:7f:25:e5:99:63:69:a2:94:0d:
06:45:7f:01:28:ea:dd:01:83:08:7d:7d:18:04:77:
ce:a9:59:1a:0f:93:ba:44:29:d0:a3:6c:63:69:8e:
f2:1f:f9:7f:c8:52:76:2c:80:ae:92:60:65:f5:41:
e5:11:ea:9a:25:7a:84:b6:b2:03:46:cc:e3:e9:88:
04:56:3f:31:94:93:03:48:7d:15:10:a5:e7:d9:44:
5d:f6:28:bb:c2:54:13:45:e0:b2:2d:df:d1:e7:04:
cf:9a:53:a1:a6:ba:98:06:b1:c0:94:c2:b5:b5:4d:
e1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F3:60:87:C3:FC:EC:FB:00:6F:51:8D:78:11:B2:55:EA:57:C9:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/46431e-4951-4e1a-9195-68a4551f68a8/1/6_Ngh8P87PsAb1GNeBGyVepXyQ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.132.0/22
83.136.176.0/22
83.229.33.0/24
83.229.38.0/24
185.126.104.0/22
185.188.208.0/22
185.230.107.0/24
IPv6:
2a0a:7040::/29
2a0b:cf80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203712
206265
209581
212078
Signature Algorithm: sha256WithRSAEncryption
6b:38:97:24:61:42:f1:34:ef:7f:bc:6c:4c:59:54:1f:e9:b6:
5d:70:38:84:17:b9:c4:49:b3:be:f7:2b:85:fc:e4:5c:1f:ff:
68:31:22:61:b7:a1:c2:da:6d:07:e2:ed:41:80:00:bb:ad:fc:
ee:df:63:a3:be:a6:e1:ff:7c:00:cb:5d:f2:42:6a:06:80:e1:
2d:ec:d4:84:ef:7e:84:76:bf:e3:c3:0e:bf:71:e6:f5:dc:23:
53:1d:59:92:6e:19:ad:d0:aa:a5:de:c4:c4:17:2c:fe:6f:38:
2c:a5:43:ce:8f:61:c7:f7:14:75:ce:f5:af:28:ca:6d:ad:bd:
ee:0d:42:f1:61:b4:1f:42:fc:a1:aa:b6:23:55:8c:76:46:7f:
62:ef:ce:a9:bf:a2:cd:08:3d:70:4c:b6:de:de:a8:0d:00:6e:
07:7a:90:89:94:62:08:81:2b:86:28:24:45:9d:6d:20:17:9a:
ef:e6:46:87:f1:4a:9e:f1:bf:6a:3a:63:83:bb:3c:7b:3d:93:
80:c5:8c:ea:47:ca:8c:c0:ca:0c:fc:19:11:a8:3b:68:7f:08:
01:fd:ad:c6:b5:29:93:2d:cb:4f:88:c6:9b:1a:bc:c9:9d:1f:
1e:1b:f0:e2:5a:63:e3:05:29:04:83:97:e5:02:f0:0c:87:1c:
ef:a7:a5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 09:52:52 2025 by rpki-client