Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
File: prswRa6njo-nZIEpcU-3NgaNw3s.cer (raw, json)
Hash identifier: 0bMPvt5AHUkxaXyDmDzhB/rK21tBbQ8ylW2cI1OBS/Q=
Subject key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5ED01548A703C598B8F97ACC11A11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206415
IP: 77.111.232.0/22
IP: 185.184.176.0/22
IP: 188.227.200.0/22
IP: 2a0b:3980::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ed:01:54:8a:70:3c:59:8b:8f:97:ac:c1:1a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:15:50:51:b0:d0:0f:9a:21:f2:61:54:83:
7b:26:29:88:7a:a1:6d:1d:5c:0b:be:3d:80:59:0f:
9c:9c:71:07:77:c1:da:23:3e:06:e7:48:fc:4a:c7:
1d:d0:31:ec:6d:ba:76:01:21:37:b1:ae:22:5d:22:
c9:6e:3e:57:0b:e9:22:d8:bb:6b:4a:c5:08:23:a6:
e3:92:0b:2c:a3:23:b6:a4:17:77:11:58:c1:7a:ca:
b4:85:cf:9a:d1:98:92:22:25:bd:cf:4d:ff:28:91:
6d:1e:f5:fd:6b:72:ff:1d:d8:08:13:55:d9:41:14:
dd:55:1c:aa:92:b9:29:4b:c0:b6:03:7d:1c:23:2c:
03:5a:e7:70:e9:4c:ea:c5:0c:ab:99:9e:c3:04:3d:
11:8b:7b:c9:1b:37:1c:29:54:c4:1d:4c:3e:51:1d:
f0:6f:d5:b4:2e:40:4c:1e:8c:be:7d:f4:f7:26:64:
06:0f:24:32:6e:5a:55:b5:c8:e6:31:50:46:55:35:
4e:de:76:5b:8d:3b:4d:65:41:d7:06:0c:1a:bc:e6:
7c:2f:10:1e:05:db:d2:d4:b7:f0:7a:7f:a5:fe:68:
ed:7a:05:33:47:4f:bd:a0:a5:bb:f0:49:b9:27:ec:
76:68:3d:94:95:7f:c1:ef:4f:0f:e7:8a:eb:e1:02:
74:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.232.0/22
185.184.176.0/22
188.227.200.0/22
IPv6:
2a0b:3980::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206415
Signature Algorithm: sha256WithRSAEncryption
1d:6e:8c:58:fd:5f:88:f6:3f:92:cc:ed:83:17:2a:9b:c0:32:
a0:78:ed:18:7c:5a:eb:b5:d0:58:9c:ac:3d:d1:1d:17:94:86:
d7:38:f7:fc:fb:01:3b:cc:a3:9a:a1:7d:61:f4:c9:b0:94:0b:
dd:85:ac:59:7c:6b:36:a2:b6:c7:ed:46:ae:40:24:e4:79:68:
c9:41:1e:d5:51:99:4b:25:2e:3b:66:e4:a7:98:39:db:56:18:
ff:cf:95:95:bd:60:55:84:2e:4e:cb:cc:7d:f0:96:9b:39:3d:
60:09:89:9b:8b:df:c6:0f:0a:f1:48:3a:39:fe:d4:ba:47:05:
c6:c9:5e:a7:2c:09:05:bc:c9:9d:6a:32:c4:9b:a9:bc:da:fd:
55:3e:46:b9:1a:7d:4d:76:7d:98:d0:6e:37:9f:2f:4a:65:6c:
10:7e:06:bd:23:5a:07:a7:d1:13:57:37:f7:ca:41:c1:36:23:
d4:75:b3:e2:92:8a:b7:49:d5:f7:2b:ec:c2:df:01:99:bb:eb:
a9:53:de:50:31:12:69:0d:ce:07:dd:bf:24:64:04:2e:fb:1b:
a4:a0:ac:92:5c:b2:d2:82:84:fd:34:ce:88:e1:24:2a:ea:04:
71:cb:98:37:1b:fe:ec:5c:05:6e:cb:68:51:ba:08:f1:fd:1b:
bd:4d:e5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:40:50 2025 by rpki-client