Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nldpljiOlLjHqyDv-yO9Eb7LQQg.cer
File: nldpljiOlLjHqyDv-yO9Eb7LQQg.cer (raw, json)
Hash identifier: Iuc8MRKZpMJsn9MqCj/9Xg6Tvvd6LcYENV53O1VAeHI=
Subject key identifier: 9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420BB862A9358B45AADB6462ECC0BC3A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:19:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 24676
AS: 31103
IP: 62.141.48.0/20
IP: 84.19.160.0/19
IP: 87.118.64.0/18
IP: 95.169.160.0/19
IP: 217.114.208.0/20
IP: 2001:1b60::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:bb:86:2a:93:58:b4:5a:ad:b6:46:2e:cc:0b:c3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:19:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e576996388e94b8c7ab20effb23bd11becb4108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:18:80:79:ef:f1:75:11:20:8e:cb:7a:8a:
80:df:3a:a7:ed:2d:1b:79:47:de:87:cd:b0:3f:81:
cd:b4:02:a7:b5:13:02:62:9e:5c:c2:98:37:31:62:
97:32:4e:c5:15:87:16:3e:a2:6e:4a:f9:08:68:a1:
a5:7e:fd:bf:6b:f3:94:dc:c0:04:7d:93:13:de:cd:
de:f0:60:11:e0:2f:ec:7b:ca:80:38:3d:8a:b9:04:
e8:59:be:42:6e:7a:3d:de:18:c2:0e:cd:51:f2:e8:
35:63:54:a4:a0:3f:1c:d9:98:3a:30:2d:6d:ab:92:
41:f5:46:94:bb:f8:88:71:3a:0e:77:2c:8e:43:7f:
26:2f:6b:1e:00:07:5c:c4:e0:f2:5d:1f:08:99:ce:
6a:8a:4c:fc:6b:b8:e4:e1:59:09:65:85:f7:d5:8c:
1c:51:97:67:12:94:a2:b1:eb:35:77:ee:b7:c8:ab:
4f:5d:25:ca:35:c6:8f:49:aa:d2:1b:cd:7b:88:d9:
c1:cf:e2:96:b2:68:87:7f:bf:d8:d6:51:42:f5:74:
5e:e3:79:05:15:40:9f:80:65:38:67:2b:ef:c7:ca:
b5:1b:4f:11:14:de:69:e5:b7:01:29:f8:26:31:51:
c1:6f:bd:d0:c6:1c:07:e6:96:2f:14:08:5c:3a:09:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:57:69:96:38:8E:94:B8:C7:AB:20:EF:FB:23:BD:11:BE:CB:41:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f5e64030-2f28-42c9-b004-354bb28f6123/0/9E576996388E94B8C7AB20EFFB23BD11BECB4108.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.141.48.0/20
84.19.160.0/19
87.118.64.0/18
95.169.160.0/19
217.114.208.0/20
IPv6:
2001:1b60::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24676
31103
Signature Algorithm: sha256WithRSAEncryption
21:6e:23:e3:85:24:86:70:c0:ff:5a:17:9b:6c:49:c3:87:c3:
bc:ef:74:98:bd:c8:cb:72:aa:c5:84:c0:da:2d:b1:c3:5f:60:
37:6c:6e:32:19:a2:2b:fb:d4:a0:de:bd:dc:71:1d:76:aa:33:
ec:97:b3:a8:3a:5d:e9:3f:7c:cf:24:3a:c6:e2:18:39:fa:47:
b3:9a:31:fa:75:e4:4c:92:0e:11:44:a1:0f:c5:eb:88:23:9c:
25:61:e9:dd:53:8e:37:cd:11:d9:4c:fd:78:f7:81:52:9c:9b:
29:59:01:b5:10:ec:99:ce:29:82:be:71:17:dc:54:53:ff:73:
39:1a:6a:8d:0b:87:dc:a9:f8:27:2b:b5:2a:e2:83:6b:74:1d:
6a:f9:15:c2:38:16:e6:85:4a:72:53:a8:c8:96:4b:ed:fd:94:
c0:62:8c:b1:41:29:53:7f:c5:d0:72:7d:13:91:05:13:68:f0:
b7:37:f2:3b:4b:2a:71:87:6b:12:62:83:25:0e:74:e5:8c:7f:
1b:bb:04:eb:fd:ec:39:00:33:fd:83:48:0f:0d:66:76:5d:f7:
ed:4d:9b:37:98:83:79:1f:51:f1:d9:f2:ab:44:cf:07:70:fe:
07:c9:ca:af:53:14:27:d0:4a:8f:fb:82:8b:5c:bc:81:24:6b:
b6:47:e3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:04:38 2025 by rpki-client