Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
File: nbtiWqVb2O81QQr93Sorw1iiXtE.cer (raw, json)
Hash identifier: /WsHuvymkGwTkqlHXIkhba/2hW9K8m9SKwkwoz4DcEU=
Subject key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F73C00701FC77FFB78543AE581564
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 131.152.0.0/16
IP: 185.194.180.0/22
IP: 192.43.192.0 -- 192.43.196.255
IP: 2a0a:4ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:73:c0:07:01:fc:77:ff:b7:85:43:ae:58:15:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:cc:85:7f:7b:b0:2b:68:bb:83:74:f9:cd:
bd:2a:24:42:3d:20:8b:3d:41:03:d0:0d:57:77:51:
e1:5b:dd:b6:bc:8a:68:17:39:19:16:be:ad:cd:88:
93:63:ef:36:f5:06:55:17:ee:ef:91:d8:91:6a:7d:
a0:6c:0e:a1:27:89:9d:99:20:d8:7b:b4:87:89:12:
3b:9e:bf:77:20:bd:bb:13:77:e9:a7:fb:da:e3:d5:
60:39:b3:0c:ad:69:a8:33:d5:4a:f6:a7:82:28:30:
25:df:50:46:04:f5:c7:2d:90:49:04:fb:35:4a:1e:
83:36:65:b6:b6:66:03:76:3f:98:f0:4d:d8:ae:8b:
a0:fb:1e:5a:7b:24:8e:b0:af:1a:4e:1c:c9:14:b2:
01:eb:44:6f:39:25:0d:b5:d9:02:f5:32:f9:d6:2e:
c2:62:5b:2a:c5:4b:6f:67:7c:df:24:c0:8b:8c:fd:
9c:47:2a:09:20:39:4f:60:d8:6f:f0:e8:db:e3:16:
6f:46:5e:38:ef:36:3f:98:46:65:22:28:3d:1b:4b:
88:68:19:de:09:62:ce:9d:70:da:79:0b:40:65:86:
a2:19:14:f1:58:9f:1e:bd:76:fb:07:c8:ac:46:a4:
2e:3e:87:3d:1c:7d:9f:f6:14:da:ec:d7:06:9f:a6:
8d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.152.0.0/16
185.194.180.0/22
192.43.192.0-192.43.196.255
IPv6:
2a0a:4ec0::/29
Signature Algorithm: sha256WithRSAEncryption
51:53:96:e5:61:41:4f:7c:45:6d:17:16:73:99:e7:b0:c7:25:
c8:e9:6a:5a:7a:3d:da:4c:fe:21:f2:c5:ce:e5:e2:6e:65:a2:
9f:b1:53:87:c9:a7:27:e9:d4:69:c8:e9:a5:3f:fc:83:ed:72:
45:f0:6f:cb:7a:6f:81:e7:bb:ba:b0:81:27:ce:d9:77:b9:a3:
69:af:2d:87:27:06:01:06:42:5f:47:3e:84:ae:4c:d4:b5:f6:
ef:b9:54:4b:fb:32:aa:8b:33:e0:24:5b:15:e9:5b:38:da:a8:
28:f6:66:39:49:9c:ca:31:b8:4d:41:2d:45:8d:0e:93:65:94:
6d:d3:b2:f2:75:ee:94:a8:0d:84:12:88:e9:44:75:2b:65:c4:
ef:1c:8c:41:d1:92:a9:16:bb:cb:47:03:51:0a:7d:c0:84:45:
5f:45:25:7c:60:8e:26:80:03:78:56:c7:9f:e4:a3:64:44:bf:
3d:a0:80:a8:0c:93:52:85:8d:4d:3c:89:28:b5:1b:84:3f:08:
a5:d9:f3:8a:00:ec:90:2c:35:a6:22:d2:b1:a4:77:06:6c:38:
aa:9e:da:be:1b:5a:cd:cc:6f:a7:fc:3c:ff:d2:04:66:c8:a5:
e7:8f:36:58:e8:3c:7a:fb:5f:64:2b:9a:f7:c1:f2:5d:6a:c5:
5c:6c:dd:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:51:54 2025 by rpki-client