Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
File: n15P8s7k23qVvPKjrRHJR1dbsaY.cer (raw, json)
Hash identifier: lfTQchf7b90a7cXvCIBjp0t82Gbtl5OmA90i2epbmT8=
Subject key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAA5C1E7AF2E6E56645BF3523E20E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21433
IP: 194.28.244.0/22
IP: 213.156.160.0/19
IP: 213.234.32.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 21:19:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a5:c1:e7:af:2e:6e:56:64:5b:f3:52:3e:20:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:fa:95:11:91:48:0f:4b:3e:3d:44:df:f2:
33:3e:0a:92:7a:26:51:e6:e1:95:2a:bb:38:ea:a8:
d5:f6:6f:c7:13:53:3a:a5:d4:64:83:37:a4:6b:d4:
fc:c1:d1:ce:dd:38:99:6c:d5:63:91:b5:e3:af:a4:
63:fa:12:ee:c9:5f:69:56:a6:06:76:57:ee:67:30:
2e:ec:8d:15:b5:b4:e3:51:74:66:3f:96:16:dd:cb:
87:2b:d5:11:c8:1c:e1:e8:bc:32:25:62:15:ff:f4:
72:d8:34:fe:3d:f3:ac:c4:9a:12:98:62:34:c2:26:
c2:70:77:c4:55:70:3a:cf:78:db:46:dd:10:aa:27:
15:02:12:0d:d4:2b:2d:4e:c6:99:f7:0f:fe:3c:6e:
28:57:46:7f:d9:33:58:0c:c0:ce:b9:86:9f:d4:ed:
c5:f9:86:3f:91:25:41:d8:90:45:72:f1:b3:8a:4b:
1f:b8:30:93:c3:7e:6f:b2:7e:cf:32:3a:13:ce:7c:
ad:f7:d9:ca:65:3d:d1:b2:40:ec:28:51:ec:07:d6:
ea:d2:13:35:53:c0:63:e2:ee:af:05:ef:2e:06:b4:
5f:4f:ad:08:5f:49:4c:b6:a5:e4:cd:6e:bf:19:51:
4d:ad:84:63:30:2a:e1:08:d0:f6:e5:17:69:32:4b:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.244.0/22
213.156.160.0/19
213.234.32.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21433
Signature Algorithm: sha256WithRSAEncryption
21:87:7f:dd:e7:60:01:06:9c:7e:6a:d4:ea:c1:e8:37:6d:6f:
b6:fa:22:f5:df:2b:85:ac:10:a1:8a:2e:da:b0:55:19:f7:8c:
9a:e4:b1:8f:bd:9e:a6:e6:77:f2:ba:a0:20:bd:27:f1:7b:cd:
91:c0:d8:bc:08:4a:71:8c:f1:b0:88:c5:c5:33:dc:9a:a9:f2:
02:2a:90:1b:4e:79:74:6d:24:7a:7c:2c:67:b6:28:1b:ff:d3:
01:91:61:bd:5b:1b:f9:22:ee:84:56:7f:3d:0f:e8:5a:99:8c:
4e:20:d7:53:b6:a6:3f:b4:c2:d8:87:38:1a:ab:b5:29:eb:0d:
68:ae:7e:35:54:3b:10:f5:14:bf:fe:d7:d3:7a:b6:7c:28:b2:
2f:fd:fd:21:c8:df:6c:b7:b1:93:92:fb:f5:a2:a1:54:3e:24:
75:c4:33:12:73:bf:8a:37:68:9c:80:2d:0b:fe:8c:03:16:bc:
74:0d:56:0a:c2:f3:37:95:e9:5e:b0:4c:fa:cf:f8:58:a6:4b:
27:38:c3:49:4a:88:ef:a8:72:b9:d3:85:89:08:b1:50:fe:80:
b3:a6:08:36:8a:6c:37:80:c7:24:47:39:78:27:91:ca:28:1d:
f2:59:c6:25:d7:85:0a:f4:74:7f:96:a6:0a:ed:2f:6e:93:05:
06:a0:3e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:36:29 2025 by rpki-client