Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NrVfs00p-WJUUTKgJbUmRP3_v28.cer
File: NrVfs00p-WJUUTKgJbUmRP3_v28.cer (raw, json)
Hash identifier: 0iOcl11BiVQchfaqr5n/iYd/CLn5KUPvUw5XC/K2D1k=
Subject key identifier: 36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7FA213BCBBCADBD5CECC9893C965E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212217
IP: 185.206.123.0/24
IP: 2a10:ca00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fa:21:3b:cb:bc:ad:bd:5c:ec:c9:89:3c:96:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36b55fb34d29f962545132a025b52644fdffbf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:11:c8:2c:22:18:c1:a3:53:ed:81:1f:06:1f:
2c:db:01:36:72:d2:98:b9:c2:bc:5b:dc:a4:74:ef:
e8:15:72:f7:e9:5d:03:bd:6d:c2:2d:b5:e9:91:19:
96:e3:93:f0:1e:3a:82:2b:0f:ad:26:35:4b:be:d3:
9d:2a:6c:e7:7e:35:5e:cd:2a:0d:4b:59:c1:4c:56:
30:6a:16:5f:3d:86:95:d0:9a:8c:64:84:25:23:39:
ff:9a:73:70:12:ab:66:11:75:70:dd:1c:95:2b:c4:
95:e6:1b:ac:2d:cd:86:75:de:7d:c8:8d:1e:37:5a:
f6:fa:b9:dc:58:2c:f4:7f:6c:d7:4e:00:62:9d:16:
df:a1:fc:f5:3e:6e:f0:cf:3a:dd:df:a8:57:4c:5d:
40:30:ae:4e:98:4f:ff:ae:a2:e4:43:04:a4:95:be:
09:11:40:13:9e:13:26:64:17:4d:6a:ee:0e:87:f0:
ea:6b:21:5d:63:ff:18:5f:64:22:c2:d4:44:f9:fd:
1e:ac:1c:b3:cf:6c:58:2c:e5:4e:cb:62:de:85:02:
98:6b:37:ed:30:fd:86:c7:28:e3:84:eb:4a:56:12:
81:6d:f5:62:be:01:8c:0b:4e:ca:0c:9d:b3:22:fe:
63:c4:93:01:e4:d5:fd:e9:49:74:87:d8:0a:b8:55:
6b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:B5:5F:B3:4D:29:F9:62:54:51:32:A0:25:B5:26:44:FD:FF:BF:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2bf00b-bfbc-4f6b-a13e-f10f73a9ecb3/1/NrVfs00p-WJUUTKgJbUmRP3_v28.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.123.0/24
IPv6:
2a10:ca00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212217
Signature Algorithm: sha256WithRSAEncryption
8b:7e:93:1f:d3:04:a1:d6:b7:58:a5:fe:7a:47:58:3a:6d:de:
f7:25:d5:02:92:86:8f:7b:1c:67:e1:b7:ab:fb:ce:57:7b:04:
c3:21:24:1b:ec:4e:78:0d:0b:1f:e6:40:14:7d:9a:81:6f:ba:
91:da:f4:97:30:9c:72:df:88:b0:7e:bf:ea:7b:41:3b:ee:6c:
4a:3a:84:ca:a0:54:fd:de:e3:0c:b3:50:be:17:71:a9:4a:f1:
2d:d6:38:18:18:ab:21:cd:6e:85:ef:15:7d:65:9c:4b:73:27:
2e:5a:1c:fa:fb:68:85:a4:fa:5b:cd:6f:bd:0f:5d:c6:83:40:
19:4b:50:a7:06:1f:b8:99:29:97:3b:89:27:72:ad:70:c4:e2:
44:c5:3b:67:57:a8:b7:f6:9b:46:2e:c4:52:0a:01:40:b3:46:
c3:97:f4:b7:fd:07:3d:d7:88:52:08:02:3e:05:f4:e4:c4:6b:
e8:89:1b:9f:e6:20:51:16:54:1c:b6:8f:b9:60:f1:5c:40:6b:
00:03:b5:3a:30:85:5b:43:78:04:31:ab:42:85:65:70:65:98:
0d:e4:ac:32:01:0e:9a:69:d4:6a:e9:a8:81:23:73:96:49:de:
f9:9c:92:70:b6:10:11:d7:30:bd:57:6a:5c:9b:39:60:a1:e6:
40:fa:0a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:37 2025 by rpki-client