Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
File: N28vTtsjIwxkt5O0GVfvSjI-PFM.cer (raw, json)
Hash identifier: uAlqpb/jhDUueTjuac3BIBnIxichJq55mBJwN4yBsdA=
Subject key identifier: 37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B346964DD4DEF92A528C6813A84CB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.162.1.0/24
IP: 193.162.8.0 -- 193.162.12.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:34:69:64:dd:4d:ef:92:a5:28:c6:81:3a:84:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:9d:75:fc:00:65:09:6a:e5:8c:f8:98:15:
99:b9:f2:ce:4d:2f:1c:72:9e:1e:47:d3:4f:97:47:
1f:f9:36:f4:aa:e0:7e:ee:f4:63:e1:66:8a:fa:c8:
ee:de:29:f9:da:1e:b7:98:50:23:9c:ce:53:32:6c:
1c:5a:ff:2e:ec:80:3a:8b:fd:85:60:bb:ef:72:68:
fc:3b:7e:9f:c1:1d:53:d6:ee:8e:04:a5:d4:25:7a:
e3:2c:28:24:fd:01:ad:b2:e5:f2:15:e6:e7:e4:db:
f1:8a:6b:fb:ac:82:1f:08:d6:2f:9a:d9:de:f2:7e:
fb:ea:d3:c0:4a:a9:05:1f:b2:69:71:aa:40:af:92:
41:3c:bb:68:26:59:42:8d:f3:80:12:11:80:30:87:
09:ee:61:91:18:6a:89:93:97:75:60:cb:0f:7b:4e:
26:31:0e:9f:ed:bd:be:f1:a3:c1:fd:9a:8e:7f:5d:
48:4a:8e:20:60:dc:d6:03:94:42:d6:b6:25:01:ea:
7d:e6:0d:70:fc:b5:c4:19:d3:89:5a:f0:6f:6b:0c:
fe:8b:ad:52:3b:ea:a5:c5:05:cf:58:0f:73:be:7a:
ff:a8:3b:7a:11:fd:dc:81:08:9d:01:05:47:34:d9:
5d:ca:a9:4b:11:78:63:55:d3:fa:e7:06:1e:f2:39:
94:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.1.0/24
193.162.8.0-193.162.12.255
Signature Algorithm: sha256WithRSAEncryption
25:4a:98:7c:d2:c4:90:68:e6:89:b5:fd:34:ef:56:50:b0:a9:
34:ad:41:a8:88:51:48:2e:9e:4d:c5:ba:c1:2c:41:dd:7a:c4:
b6:e8:ee:79:51:2d:da:73:c1:93:8c:56:a7:11:46:a9:92:7f:
18:40:68:61:b9:2c:c1:ff:fa:34:ce:12:e3:c1:08:68:23:cd:
78:a2:b4:23:e6:e9:ba:16:95:40:6e:6c:b1:85:d8:54:74:5f:
d5:c9:87:a4:c6:83:e7:09:57:17:25:23:fb:19:a2:d8:0e:f1:
8c:2c:7c:90:6d:10:d5:28:50:f0:be:54:88:56:c6:a9:98:4a:
78:e2:f6:11:7f:2f:1c:7a:f9:38:99:22:bc:cd:de:f7:29:00:
e0:77:b2:96:6f:e6:aa:13:00:3b:f3:5f:ee:a0:55:e0:8a:dd:
6f:09:8d:0c:df:20:b6:f7:ba:a5:72:30:c9:d3:6b:8d:e7:92:
2b:cb:50:c0:f2:cc:9b:cd:64:85:f9:27:e7:d4:1e:bb:f2:92:
44:95:1c:20:92:ba:9c:5a:14:e5:92:3b:43:30:f4:69:b7:74:
8b:a6:cb:bd:48:88:24:42:af:25:19:06:4e:19:5a:66:3c:f6:
81:aa:c9:c1:05:62:46:48:4a:10:a4:27:03:08:aa:23:1b:51:
6e:a3:56:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:40 2025 by rpki-client