Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer
File: NpT8xr9qh0D6eBRkH9nW7I2GLl8.cer (raw, json)
Hash identifier: Ym3OQtHDuDnaO9tccQIg6YRYvZcY8fa63vaAyUYUFRY=
Subject key identifier: 36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DE95C531D958F813105A1EBA07A33
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201527
AS: 204145
IP: 45.130.220.0/22
IP: 45.157.196.0/22
IP: 89.35.179.0/24
IP: 185.50.72.0/22
IP: 185.113.64.0/22
IP: 185.194.204.0/22
IP: 2a01:a060::/32
IP: 2a02:7400::/32
IP: 2a0a:50c0::/29
IP: 2a0e:5840::/29
IP: 2a0f:a2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e9:5c:53:1d:95:8f:81:31:05:a1:eb:a0:7a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3694fcc6bf6a8740fa7814641fd9d6ec8d862e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:74:9e:a5:b7:e2:dc:dc:22:c9:94:98:87:34:
28:2e:8f:4c:f1:dd:43:1c:88:7c:56:4d:58:08:a4:
4f:7b:4b:4b:a6:4e:c2:da:bb:e1:61:97:d5:af:61:
5e:dc:5e:1a:96:f2:ba:45:13:c9:b0:9c:35:33:1f:
76:a2:84:82:57:19:a9:92:5f:83:ac:03:f8:47:5b:
f3:3f:de:46:ed:c6:fd:1b:84:aa:ad:2d:85:6b:da:
c3:60:6e:89:1d:ec:5d:0a:06:a0:e8:c2:12:9d:4e:
94:1c:66:a3:77:dc:b3:a2:94:fd:01:0e:18:f5:89:
f6:64:1c:ba:9a:6f:46:29:f2:d7:9e:47:15:48:f2:
94:d3:3a:5f:ce:c1:c3:1d:d5:e0:e3:e1:0d:d8:de:
44:c7:55:fd:77:6b:e5:f3:46:be:c5:e6:8a:a4:c0:
a8:72:4d:16:55:55:99:84:67:ba:ad:f1:6f:e2:bf:
bd:72:e3:11:c6:f4:3f:2d:2f:b4:c1:4a:c1:32:cd:
be:8c:c1:f2:16:4e:ab:e1:6f:b6:5d:2f:69:de:6d:
5c:d8:c9:88:6c:05:6d:37:2e:46:08:36:36:a0:34:
c6:69:37:d0:a5:a8:45:9b:22:fe:65:34:04:82:9d:
a6:b5:f7:19:14:a2:6c:9e:e5:1f:a9:03:14:2d:b2:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:94:FC:C6:BF:6A:87:40:FA:78:14:64:1F:D9:D6:EC:8D:86:2E:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/a8dd9e-71f2-4f77-b575-0d3fce429bde/1/NpT8xr9qh0D6eBRkH9nW7I2GLl8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.220.0/22
45.157.196.0/22
89.35.179.0/24
185.50.72.0/22
185.113.64.0/22
185.194.204.0/22
IPv6:
2a01:a060::/32
2a02:7400::/32
2a0a:50c0::/29
2a0e:5840::/29
2a0f:a2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201527
204145
Signature Algorithm: sha256WithRSAEncryption
85:76:c1:c7:fd:93:1f:28:93:89:cf:ce:2d:08:f1:8e:60:68:
e2:83:f5:0a:f9:1d:c1:b6:af:81:8e:d5:ec:a9:fd:4c:ee:ea:
6d:15:74:2d:58:65:ed:72:eb:58:71:be:08:a6:56:9c:a8:a0:
19:76:d2:ff:80:95:79:62:10:3a:1d:2e:2c:87:f9:2a:57:69:
73:20:cf:7b:ac:ff:c4:15:b6:d4:7a:d2:6f:de:56:e2:14:53:
6f:c2:8a:92:16:1a:a9:6f:81:79:bc:3d:dd:78:54:89:cf:d0:
29:50:6d:5c:96:49:8b:c4:b0:cd:61:de:30:5b:0f:b2:41:d7:
a0:ff:44:fa:82:e9:22:74:ac:3a:70:2c:68:dd:e7:f0:92:72:
3d:97:d8:51:fe:58:6a:9e:c5:41:c1:03:35:66:89:fd:2f:25:
fc:ab:20:42:fa:17:7c:3c:98:81:42:33:a2:c6:45:02:17:0c:
d6:39:1b:f4:3f:9f:f0:a0:71:a2:94:b6:e8:2f:10:8d:42:cc:
c2:c3:1f:07:2d:10:4c:44:8e:24:77:0d:10:03:ef:9b:c9:09:
c0:5a:5e:16:33:e3:53:77:44:1d:33:0f:a0:68:c5:cb:64:3c:
42:6f:1f:3b:49:93:c5:7a:a9:e9:7d:be:83:80:db:97:37:4d:
bb:92:52:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:47:52 2025 by rpki-client