Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nqFCUiVBDJMhHQh1j82vD3qhzKo.cer
File: nqFCUiVBDJMhHQh1j82vD3qhzKo.cer (raw, json)
Hash identifier: H+bsAwP1RFGTCeTLQ7Q2fzzSH99lC25pt8in3dxNZNE=
Subject key identifier: 9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA12E54A039CF92D81A32D6474877A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 61336
IP: 91.247.38.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:12:e5:4a:03:9c:f9:2d:81:a3:2d:64:74:87:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ea1425225410c93211d08758fcdaf0f7aa1ccaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:cd:e5:6b:ab:40:d4:bc:94:87:a7:16:24:
ce:7f:1d:00:dc:cd:57:23:81:39:a4:5c:49:d7:24:
45:33:19:18:ad:58:03:98:60:13:9d:41:7f:4b:15:
a8:e1:f2:0b:15:66:ce:81:bc:76:c6:1e:8b:30:e4:
83:0a:f6:d1:fc:6f:74:b5:28:8c:08:1e:39:05:24:
08:b7:c4:63:07:14:b5:e0:2f:27:68:05:af:47:a6:
30:c1:4f:fc:03:80:05:27:3c:48:cd:2b:8c:83:e2:
87:c3:32:33:1d:bc:04:e4:e5:3e:10:43:17:be:f4:
3f:1d:93:5d:1c:d3:cd:63:8b:18:3c:91:af:65:03:
8f:6c:47:7d:66:fd:ed:8a:69:13:06:74:00:3a:85:
6d:cf:cb:05:fd:3b:d5:68:b3:68:9a:cb:d4:e6:cf:
a2:48:42:31:e8:a0:fd:6c:a4:0b:48:c1:77:22:3d:
8d:9c:71:93:a4:ff:88:77:92:4b:eb:7d:93:d3:58:
f4:24:d6:10:2b:4b:16:37:d3:3b:c7:20:bf:94:f3:
33:f0:aa:f9:8f:70:3d:48:96:9e:94:94:43:bc:fb:
e0:20:06:50:88:a7:13:3d:30:23:5b:07:60:7d:12:
83:39:87:f7:77:c1:c7:93:17:d6:89:79:96:0e:cf:
61:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A1:42:52:25:41:0C:93:21:1D:08:75:8F:CD:AF:0F:7A:A1:CC:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a3e46f-7e5a-4663-bd63-dc0966669609/1/nqFCUiVBDJMhHQh1j82vD3qhzKo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.38.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61336
Signature Algorithm: sha256WithRSAEncryption
08:a8:50:2e:19:81:28:41:5f:ea:82:27:78:21:fc:18:c9:6b:
23:59:3b:ef:63:fa:c9:17:bb:f0:d8:f9:9d:dc:f3:e6:56:a1:
f3:ae:81:1f:63:ac:84:cc:3f:74:5e:4e:df:0e:47:68:6c:44:
96:64:1e:45:6e:7d:4a:76:ad:0f:1f:20:9d:1e:e6:d5:6d:c1:
14:59:4a:80:00:c3:8c:37:fa:a3:4f:ff:01:2c:c3:a0:a1:14:
88:80:b5:1e:4d:c6:38:68:e1:2d:3e:69:77:e8:fa:0a:89:d2:
69:d7:8f:26:3f:3c:18:47:6d:56:ba:6d:fa:4d:7c:99:e1:88:
cb:af:c0:9c:53:7c:ef:61:0e:b8:20:cc:06:a5:04:29:6a:b3:
92:1f:c7:56:ea:a5:a9:84:05:81:5d:9e:d4:f8:77:bb:fe:05:
a7:e6:75:5b:74:85:31:ee:23:b7:15:df:5d:e5:ed:87:46:31:
f3:c7:d8:6e:f3:c0:bb:a0:d5:cf:e4:74:6f:00:83:23:fd:a8:
2b:9f:8f:82:11:3a:d7:cc:de:57:06:0a:f9:74:37:6f:ee:01:
cb:fc:75:3d:de:9a:e7:e6:5a:0f:40:0f:56:ad:03:92:69:19:
24:b5:a5:18:9f:79:6f:65:5f:04:5d:20:ea:ff:ea:0a:15:7b:
33:e9:f7:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:18:04 2025 by rpki-client