Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nyHqqnvQ7mfKYwLj16quZNcpQC0.cer
File: nyHqqnvQ7mfKYwLj16quZNcpQC0.cer (raw, json)
Hash identifier: lEoJXiP98B/HRb2RU2u5uJt589I6omk8qOmcoV4g4FA=
Subject key identifier: 9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FCCF3AF94066EBA552516F0323DFD0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 62.124.0.0 -- 62.126.255.255
IP: 62.188.0.0/16
IP: 213.116.0.0/15
IP: 2a02:2a80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:cf:3a:f9:40:66:eb:a5:52:51:6f:03:23:df:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f21eaaa7bd0ee67ca6302e3d7aaae64d729402d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:cf:a4:6a:19:9d:77:21:20:82:6a:bf:25:
a4:88:fb:0c:32:91:15:96:1b:74:9a:93:63:bc:c3:
ac:c4:39:ed:d2:8b:3e:3b:6d:63:76:87:26:f5:15:
e1:cf:a1:99:05:89:9c:e1:d9:4d:75:02:f5:60:6b:
f4:d3:6c:86:29:bd:9f:2f:87:a9:6a:b1:a3:11:65:
b6:c1:0f:03:12:ed:7b:ef:9d:e9:e9:07:b2:a8:9f:
3c:b4:17:83:47:a8:d2:c8:a2:e7:b4:d5:ff:c1:3a:
e6:d6:f1:80:8f:fb:9d:56:67:04:7a:f5:98:c9:06:
46:3f:8d:8c:bf:30:ff:1e:00:9f:36:b6:7d:c1:ac:
cb:40:61:ef:b4:fe:bd:d4:df:b3:ca:63:d8:f8:ea:
a9:c5:7d:f6:e1:3f:c2:fd:f4:60:33:a4:02:19:30:
ce:fe:df:f8:ed:ba:0b:a0:3b:ce:af:bb:ad:04:fc:
4b:20:a9:d4:71:ea:e2:1a:6f:76:c6:2b:93:e1:90:
d4:6d:76:23:23:81:1d:01:34:b0:5b:04:ad:8c:e0:
f6:30:98:d6:4f:a2:59:4f:89:fd:94:a7:83:32:f0:
55:f4:e6:c1:41:b7:c6:7a:e6:90:84:59:65:3b:d1:
a6:ea:a1:23:db:9c:73:e3:96:26:c6:d0:e7:fd:72:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:21:EA:AA:7B:D0:EE:67:CA:63:02:E3:D7:AA:AE:64:D7:29:40:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/76f462-ad81-4f02-898b-a96f61c0c1da/1/nyHqqnvQ7mfKYwLj16quZNcpQC0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.124.0.0-62.126.255.255
62.188.0.0/16
213.116.0.0/15
IPv6:
2a02:2a80::/32
Signature Algorithm: sha256WithRSAEncryption
7b:fe:ee:c6:6f:6c:b6:1d:23:ad:29:c9:62:d5:52:78:c3:a0:
9c:1b:c9:78:14:ce:3e:08:f3:df:d4:ec:63:e3:9d:7c:ca:83:
42:29:1f:70:64:a0:5a:63:0e:ed:5c:7f:8b:0d:77:42:5d:2b:
97:12:a2:14:69:17:2e:c9:66:8a:bb:15:db:1f:53:35:f9:d5:
80:1a:d6:fd:86:9b:35:06:d6:14:ac:04:15:26:77:27:9c:95:
2a:f5:e1:1c:15:0b:c0:65:09:31:02:ee:23:d6:67:5c:8a:a1:
43:36:9f:df:99:05:69:52:9f:84:e1:fe:0b:6a:bd:0e:1b:08:
5f:0b:17:11:14:2e:88:55:0a:f8:26:94:79:83:36:16:47:9c:
51:96:f3:29:3c:06:1d:08:70:f0:a3:46:ff:de:f0:f7:b5:7b:
38:58:d5:c4:f8:dd:3a:fa:73:3a:fe:0f:ef:a2:9b:d2:49:99:
a4:fc:b9:c3:f9:da:86:4e:bc:aa:ba:5f:f6:f2:4f:fc:32:04:
0b:ad:2e:95:5e:f7:58:a2:6a:2e:c4:a4:a2:ab:81:0b:07:ac:
3e:ce:ad:70:09:34:97:d1:37:b1:17:c9:4e:c2:82:41:40:e5:
01:d6:5d:6f:97:b6:8a:54:60:9c:ca:38:55:e3:29:17:96:55:
b2:ac:0e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:48:08 2025 by rpki-client