Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
File: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer (raw, json)
Hash identifier: O8FHF0bvA1dKRyZZGeH5UY7QGLZFROptiISmMRC8EB8=
Subject key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FAF3853CA5DC6205FE88D55A0E9D2D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12684
AS: 60725
AS: 201554
IP: 80.247.128.0/19
IP: 92.250.128.0/17
IP: 109.120.64.0/18
IP: 148.253.16.0/20
IP: 185.26.152.0/22
IP: 185.71.84.0/22
IP: 212.56.224.0/19
IP: 212.165.128.0/17
IP: 213.169.96.0/19
IP: 217.28.32.0/20
IP: 2a02::/32
IP: 2a04:38c0::/29
IP: 2a05:30c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f3:85:3c:a5:dc:62:05:fe:88:d5:5a:0e:9d:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37a352e17af87ee2e5dc173d15543da63be55473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:ac:3f:67:82:b5:5d:6a:8b:bd:73:18:9c:
3e:06:63:12:06:ee:e2:2a:bc:71:f5:fb:25:b6:65:
68:a1:21:16:c4:41:b3:d6:e4:f4:e9:b4:f6:3c:4b:
f4:38:4f:e5:5d:22:b1:62:d7:67:a1:21:e6:7d:73:
f7:95:a0:af:82:8a:21:4f:17:36:12:d7:7b:9b:38:
3e:2f:d5:5e:38:bf:11:b9:5e:ff:8d:de:41:f1:ef:
80:dd:e0:8d:07:9d:f8:2b:ad:ac:76:86:2a:6a:7e:
62:29:1e:07:2c:a1:8f:23:80:02:a7:60:6e:fb:e3:
3d:17:34:7c:8d:eb:c1:bc:48:49:ec:7e:d5:83:80:
8b:25:2d:46:06:fb:9f:11:7b:91:d1:4f:c3:65:e0:
b6:a3:fc:5f:50:f5:c4:ec:a1:b1:0f:e5:18:0c:c1:
b2:bc:bc:51:b6:42:65:61:d9:b3:2c:7f:b8:6e:e9:
9e:07:9d:a3:61:b4:60:37:c6:4c:44:82:f5:5c:29:
15:97:eb:1c:29:1e:24:d9:d6:8e:49:3c:68:a4:5e:
74:38:41:4e:30:5a:75:70:41:fd:9f:26:5c:40:2c:
98:0c:50:86:09:40:eb:2a:f2:36:ea:6a:14:09:8f:
b1:62:b9:58:b0:83:c9:df:7b:17:30:3b:1d:65:5e:
47:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.247.128.0/19
92.250.128.0/17
109.120.64.0/18
148.253.16.0/20
185.26.152.0/22
185.71.84.0/22
212.56.224.0/19
212.165.128.0/17
213.169.96.0/19
217.28.32.0/20
IPv6:
2a02::/32
2a04:38c0::/29
2a05:30c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12684
60725
201554
Signature Algorithm: sha256WithRSAEncryption
9f:8d:3c:61:6a:89:b6:d7:9b:cd:72:3e:0b:d6:68:68:cb:10:
82:75:76:fd:6a:bd:e1:7c:d6:aa:22:31:43:d6:33:19:71:6e:
5c:f3:f5:a6:1f:c9:08:f5:1d:7c:8b:8a:98:f5:02:8c:d3:d0:
6c:b8:d2:e0:5e:c7:cb:42:e4:84:4d:e4:43:90:d8:c4:a9:5f:
5a:88:16:90:16:8c:d5:2e:5c:3e:c5:d1:a2:f1:f5:52:04:05:
80:bc:be:2d:df:5a:50:d5:1a:5c:19:c7:7e:e7:14:fb:03:50:
55:af:0f:e0:33:4b:5d:92:7c:b9:86:0b:64:76:0a:71:34:06:
88:ad:74:c9:ac:b6:b3:c2:2c:ed:00:e2:a0:39:22:f7:d2:81:
8e:70:d4:cd:83:e8:22:48:39:29:dd:c7:5d:e6:78:23:a5:f5:
2f:39:40:5c:e9:38:dd:f1:90:59:ca:28:97:7d:d4:f4:b3:b3:
52:1c:51:5d:7f:fb:5e:04:0a:4d:ce:d8:d7:9f:e4:b7:7e:ae:
1c:94:81:54:c1:c5:00:82:8e:d6:af:7f:f8:8a:19:44:24:44:
70:b6:88:5e:d7:74:1c:d4:f7:44:39:57:23:df:5b:04:b6:d5:
44:05:e8:95:05:f4:85:c0:e5:12:3d:84:2c:86:ff:0f:46:80:
83:71:f8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:35:30 2025 by rpki-client