Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer
File: c-Nz_ueA7qsqkEItCtUU4ISo1hE.cer (raw, json)
Hash identifier: apyFXYK7CkZPkWj2A9vw4MCH9SNN92Nzf4irDHTYEAY=
Subject key identifier: 73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB89397B896D61DE12FE96ED5EB0BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 5600
AS: 34442
AS: 200994
IP: 46.232.192.0/21
IP: 77.246.16.0/20
IP: 80.77.240.0/20
IP: 88.83.96.0/19
IP: 185.89.120.0/22
IP: 185.93.5.0/24
IP: 195.8.116.0/24
IP: 195.80.0.0/19
IP: 2a00:1990::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:89:39:7b:89:6d:61:de:12:fe:96:ed:5e:b0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73e373fee780eeab2a90422d0ad514e084a8d611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:26:b0:9a:70:42:e4:86:91:dc:18:81:f1:00:
9b:76:32:a0:65:91:16:6c:7b:7c:a7:d8:de:5c:6a:
8b:fc:3c:0d:53:57:cd:29:00:0f:7a:37:91:dc:b1:
fa:20:03:21:fc:63:2a:2c:10:04:ec:64:6c:5c:2d:
2a:a3:24:3e:2d:0d:55:47:ef:69:32:7d:b8:cb:c5:
aa:8d:73:92:91:ab:be:cc:aa:81:1e:89:63:f7:cf:
97:26:21:a7:f1:a4:44:1e:47:19:25:7b:92:99:14:
c9:2d:4c:3a:41:f6:07:0d:31:69:7c:2f:5c:52:88:
5b:02:33:41:05:34:a1:b0:7b:1f:e1:6e:aa:0f:e4:
c9:1f:7e:60:ab:ac:7d:41:ec:5b:57:b7:0e:2b:bf:
1e:c6:8f:ae:c3:d5:cf:88:7c:25:5b:b9:fe:36:3f:
b9:f5:b2:c2:35:65:37:cb:b0:29:48:f5:fc:8b:6a:
a3:42:ac:10:a6:66:07:bc:a2:d0:5f:10:b3:7d:4f:
63:86:fe:ea:c2:14:b4:65:9e:4a:b0:d5:ae:e1:cf:
01:7f:54:5c:f9:4c:8c:b7:71:aa:4e:66:00:3d:6e:
ef:4a:d4:5c:c2:a9:d5:ac:fa:60:13:bb:3e:20:d6:
bc:94:6c:97:80:1b:09:b8:1a:ef:0e:cd:6f:e7:82:
3b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E3:73:FE:E7:80:EE:AB:2A:90:42:2D:0A:D5:14:E0:84:A8:D6:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0e433-9b36-47a6-93a2-041fd4c6ffd4/1/c-Nz_ueA7qsqkEItCtUU4ISo1hE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.192.0/21
77.246.16.0/20
80.77.240.0/20
88.83.96.0/19
185.89.120.0/22
185.93.5.0/24
195.8.116.0/24
195.80.0.0/19
IPv6:
2a00:1990::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5600
34442
200994
Signature Algorithm: sha256WithRSAEncryption
3f:ab:e7:1f:90:85:58:e4:75:c7:46:df:f2:8d:c8:97:e6:7d:
40:7e:6e:1d:8c:d5:b1:68:84:20:90:02:38:8d:c0:02:8e:ed:
1e:41:e2:ea:d5:a1:e0:91:03:45:6d:2a:ec:5e:12:76:b2:cf:
7a:91:30:c8:f0:96:82:79:c1:4b:70:5a:b9:19:49:31:a9:79:
20:25:28:39:50:01:a8:51:16:de:57:0c:79:e8:e8:19:e0:71:
38:4e:ef:22:c1:5c:50:92:42:db:b9:b7:ed:0a:90:3f:b8:7b:
1b:b8:af:f6:61:62:36:4e:72:0f:fb:ed:2e:59:b3:be:e1:fc:
00:fd:0e:a7:11:5c:29:00:36:43:04:59:47:99:f1:73:50:63:
45:4f:0b:9a:7d:68:0f:dc:3a:bc:26:24:41:a1:27:00:0b:78:
82:33:65:86:5d:53:41:a0:48:60:97:80:3a:d5:15:d4:bd:09:
c2:8e:f3:47:68:98:9c:e5:76:c9:64:d9:ed:6c:3a:05:87:ab:
12:bc:a2:55:e8:30:15:3c:1c:ab:1f:47:a7:04:dc:e9:ac:e2:
e8:7a:4d:3c:ad:d6:c7:c7:07:fc:08:1c:ee:4c:e2:73:fa:8e:
4c:89:33:d4:29:63:ff:8d:50:2b:d9:3c:04:a9:19:02:6d:76:
3c:8c:0b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:44:28 2025 by rpki-client