Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nVE44frPe2XbtXX6fUckDCeLNN8.cer
File: nVE44frPe2XbtXX6fUckDCeLNN8.cer (raw, json)
Hash identifier: 5lmqz/hqqaI81sb6cgFgO6tzl9w6u9qJIclkcSVzpNc=
Subject key identifier: 9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B68E18AF493DADAF6800487F89D839
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:51:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.83.144.0/22
IP: 185.174.28.0/22
IP: 2a05:9bc0::/29
IP: 2a0b:8100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:8e:18:af:49:3d:ad:af:68:00:48:7f:89:d8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d5138e1facf7b65dbb575fa7d47240c278b34df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:aa:70:89:c1:ef:50:1b:34:6c:38:56:ac:a5:
6d:0c:67:62:6f:7d:bb:f2:88:aa:7e:cb:35:12:39:
b5:75:c7:ed:3b:3e:0f:f6:fc:4b:5e:97:05:51:1b:
b9:15:50:d4:b9:ac:32:48:bb:2b:26:35:12:d9:fe:
4c:aa:d8:af:e1:6f:6b:8c:7e:41:c3:67:d8:1f:ef:
2d:bd:69:eb:a9:9f:87:fe:8a:1f:d5:56:cd:6f:21:
ac:4f:6c:81:7d:6a:30:0d:7b:05:cc:22:fe:13:e6:
d0:ed:ba:ba:75:8a:bf:79:71:06:c6:13:ff:47:be:
13:ce:93:d5:b6:fa:93:0a:01:60:46:50:58:5f:f5:
ee:3d:fd:39:b9:df:51:b2:0f:57:ef:3b:84:ed:70:
a5:58:17:cf:f4:db:71:d5:64:78:49:a3:f5:ce:54:
77:cd:b8:28:a0:cc:da:15:b3:a0:54:f6:f1:d4:cc:
ff:a7:b1:9b:1f:14:9f:db:dd:62:5c:2e:33:e1:64:
f4:12:f9:05:e6:6d:cf:db:f1:c1:1a:63:7c:64:7c:
f9:ba:ad:0d:30:b8:76:42:b9:fc:4d:8f:c0:93:04:
56:17:02:9e:a4:f4:7e:ef:a7:98:c6:e4:df:00:07:
75:b8:60:20:6f:ec:6e:5a:86:ce:62:f5:6d:3c:1f:
e8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:51:38:E1:FA:CF:7B:65:DB:B5:75:FA:7D:47:24:0C:27:8B:34:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d001ff-8323-4b89-be3d-c2efeb3b32a5/1/nVE44frPe2XbtXX6fUckDCeLNN8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.144.0/22
185.174.28.0/22
IPv6:
2a05:9bc0::/29
2a0b:8100::/29
Signature Algorithm: sha256WithRSAEncryption
b0:74:79:9c:37:d0:d5:71:f9:a1:e2:5b:06:51:50:70:02:6a:
04:64:10:c1:1e:bd:de:78:d2:95:6e:5f:ec:fe:1e:75:29:05:
5e:41:96:f1:d0:0c:73:b6:ba:c5:fd:fe:ff:23:09:b6:b8:a0:
5e:ec:8c:72:19:e2:df:20:e2:52:fc:ac:a1:3e:31:dd:e6:f0:
e8:f4:5f:28:a9:c0:6b:f6:28:08:c4:44:03:63:b5:cc:53:f0:
8a:70:03:f2:d7:32:e8:f2:26:76:35:af:07:4d:8e:c1:f2:e3:
db:59:3f:80:91:8e:2a:5c:4f:95:9c:96:d8:f8:d9:8c:84:e6:
70:01:04:7e:d3:9e:3f:df:1a:15:da:ab:34:85:b2:86:45:2b:
be:eb:1c:63:65:d5:a9:b1:31:ee:af:21:07:cb:58:5a:87:52:
b0:ec:b9:c0:ad:b4:34:6a:5a:33:2b:19:03:28:f7:39:2e:56:
da:3b:f4:5f:63:4c:49:4a:94:af:78:60:23:0d:7b:fd:da:21:
ed:86:9c:93:d8:dd:b9:57:d6:d9:c0:85:91:a7:26:fe:54:95:
13:bd:da:a0:30:9d:e1:56:3e:79:c9:10:c2:38:c3:3d:6e:f5:
0a:62:36:4b:4c:21:91:37:e5:7a:6b:66:e0:ab:61:ad:89:05:
f2:b5:18:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:30 2025 by rpki-client