Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NnBwsWnRGpYpEATjAA-bBNThEtM.cer
File: NnBwsWnRGpYpEATjAA-bBNThEtM.cer (raw, json)
Hash identifier: rEQszCbw1DaYE6zjsELICHYL39n7pDIXhfqUtVWr1Ps=
Subject key identifier: 36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942748852CFB8A5E58FA8DCC4B2039E1AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202315
IP: 194.49.80.0/22
IP: 2a0c:c8c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:85:2c:fb:8a:5e:58:fa:8d:cc:4b:20:39:e1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=367070b169d11a96291004e3000f9b04d4e112d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:00:55:95:0d:bf:61:91:40:f6:21:cd:b4:
29:68:cc:b9:f0:71:10:ea:94:77:7a:67:a4:64:dd:
7d:83:53:ca:af:fb:f5:bc:81:ef:cf:0f:37:4c:e5:
18:1f:36:52:af:81:36:62:f7:37:eb:8a:a2:59:21:
4e:e8:94:64:6b:c8:2f:2a:b0:3e:78:1b:d4:08:09:
16:8d:52:84:d2:12:37:8e:da:74:3f:b4:f4:e3:1d:
81:8c:db:9e:92:0a:8f:69:be:ea:51:ee:ff:72:b0:
22:23:e8:54:02:cc:33:36:62:83:d2:a5:f0:60:71:
b5:e6:eb:0e:12:2a:2e:7a:ba:5a:51:f0:5f:3c:12:
d7:8a:38:b0:0f:b3:41:7b:00:ee:70:d9:20:5c:0f:
43:b5:a6:29:2c:57:1d:55:8a:f7:f4:41:57:b4:28:
85:22:0d:29:89:41:c4:d6:cc:27:4b:54:ac:d3:75:
97:b9:c1:5e:12:ed:98:76:e4:79:70:aa:7c:1b:07:
c1:4b:2e:b7:99:11:da:f7:8b:66:d8:f7:97:aa:bc:
4c:c9:e4:5c:eb:a8:f5:98:fb:fb:88:54:c0:40:d9:
85:cf:5a:d7:e7:67:5c:50:cf:b0:4b:11:53:b1:ed:
33:c8:b5:70:1d:ca:b9:e6:f3:33:21:f4:d2:c2:20:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:70:70:B1:69:D1:1A:96:29:10:04:E3:00:0F:9B:04:D4:E1:12:D3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/b11980-1f7b-4ee7-a88e-a5899cee655f/1/NnBwsWnRGpYpEATjAA-bBNThEtM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.80.0/22
IPv6:
2a0c:c8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202315
Signature Algorithm: sha256WithRSAEncryption
88:2f:b1:44:fc:7a:bc:bb:12:57:b5:ca:e7:77:d9:9d:b1:47:
c2:87:2d:80:08:d1:6f:f2:7f:66:49:95:fe:9b:69:8b:bd:99:
16:9f:14:32:b3:f4:5c:6f:90:c6:73:01:e9:8e:fd:b1:13:6a:
19:a4:d6:35:98:94:0e:81:8d:d4:de:c1:89:8e:a2:3b:fa:e0:
9c:ca:46:18:25:d1:8e:10:14:a5:08:5b:c8:ca:68:8b:9f:81:
59:2d:d9:72:e7:55:d9:92:30:57:50:e3:91:5e:6a:43:bb:51:
da:4f:f7:5d:23:31:e5:c5:04:34:e0:3a:bb:8d:00:ea:3d:1e:
64:f6:11:85:d2:e9:1a:78:d3:c6:98:5b:13:de:7a:84:8d:65:
84:5e:33:a6:ab:a5:66:40:dd:52:e7:bb:1a:2a:06:b3:87:d4:
e1:96:d8:7f:5e:6f:e1:a9:ec:c1:e5:67:bf:1e:55:17:cf:c4:
68:63:25:be:5c:4f:bd:80:22:b8:7d:7b:f5:71:f0:dd:84:21:
24:1e:41:c4:42:10:1e:33:c0:ea:7f:68:d9:06:c4:4b:f8:a5:
16:47:03:c0:bb:39:7a:ca:1d:42:68:3e:b4:96:be:73:e0:f3:
7e:4b:69:d4:69:2c:a3:8d:16:73:b0:84:30:f6:bf:0a:fa:3d:
7d:83:2a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:00:47 2025 by rpki-client