Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
File: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer (raw, json)
Hash identifier: MaSxQH9dcDi5RQYKZY6DYlYukoGVWdazX2l6n5xndmA=
Subject key identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB5267FEC54224328775BE35E8F780
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.146.88.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:52:67:fe:c5:42:24:32:87:75:be:35:e8:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d8ada352982a319b54d5e483d34426346733ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1b:29:43:26:63:3d:2c:9d:e4:87:88:bc:74:
d1:d8:c3:60:87:4c:ff:15:9c:22:e6:0c:f4:77:d0:
ac:b6:4f:4f:b8:20:16:90:2f:5e:8c:e1:86:a1:1e:
ce:a9:9b:3c:2d:01:d4:af:9e:0f:19:bb:bb:3e:b1:
9c:d1:c0:f9:71:b7:ee:c0:03:32:da:01:00:da:85:
ea:a8:99:65:6b:a4:2e:6c:a5:f6:1b:b1:cf:07:a2:
85:aa:dd:f3:34:79:90:15:db:9b:64:dd:6c:7f:7c:
50:d3:44:97:88:a6:30:fd:da:29:76:a9:9d:bc:6d:
cf:2f:59:96:41:8b:52:47:d3:df:5f:cd:b7:fe:5e:
7e:da:38:db:43:de:39:f9:32:fd:bc:1a:f0:8e:84:
f9:d5:72:0f:25:ab:49:87:06:34:4d:e9:18:65:52:
3a:c3:b3:06:c9:7f:da:c0:c0:9d:8f:28:72:df:dc:
c1:79:65:87:64:7e:f8:bc:ea:fa:00:25:08:53:9b:
01:b6:62:8d:20:30:df:05:99:14:d0:88:74:f1:ad:
24:e9:1c:47:c3:73:56:0e:e2:46:65:b7:46:d8:da:
b9:72:dc:10:7c:0d:c0:a5:14:a5:84:45:c1:d7:73:
0c:12:af:64:d3:03:8b:8a:0c:b9:d2:1b:1f:79:25:
89:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.88.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:e4:ee:bb:ea:19:e3:e5:7e:46:75:58:92:de:00:9a:ff:7f:
56:e8:95:d8:01:73:4a:6e:64:5d:e1:c1:c5:28:be:0c:82:61:
30:c3:7f:d3:81:69:a9:6a:64:73:ec:65:8c:1d:4c:63:ab:eb:
49:d3:ec:c7:d6:4d:23:56:2e:61:3e:98:33:37:63:aa:07:fe:
f6:13:84:90:40:5a:17:a3:6e:30:e0:48:e2:ab:72:fb:18:58:
5a:88:65:0f:bc:85:33:36:39:ff:6d:cb:86:4e:7a:29:8d:88:
b4:10:bf:3f:c6:32:76:b3:6f:42:01:e4:62:bf:db:05:e4:6a:
2d:01:84:0e:d9:54:a5:ec:90:fa:0b:09:72:98:12:da:50:35:
f6:ad:cf:93:ae:07:ab:bb:47:14:d3:95:81:47:05:c0:a3:67:
dd:a5:42:8c:1f:73:7a:47:6e:36:ad:40:60:04:bc:f3:64:3b:
d0:84:fe:69:8b:7c:be:20:04:e6:4f:11:dc:0e:08:59:51:36:
28:b6:42:e0:43:0d:21:cd:4e:e3:c6:a2:c7:87:07:45:d5:f6:
f7:1d:27:29:88:94:75:bd:72:8e:4d:fe:1d:f4:d7:a8:d2:41:
d6:e5:ad:85:d0:2d:b6:3a:0f:ff:d7:62:a9:92:a4:04:40:76:
12:51:3b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:28:29 2025 by rpki-client