Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer (raw, json)
Hash identifier: jzWIsnKyFLXkGBLpfYrIZ0do6o12qmknTusaZgt2YHU=
Subject key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B6199C85364315C78457EE46F957B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.76.44.0/22
IP: 2a03:4ea0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:19:9c:85:36:43:15:c7:84:57:ee:46:f9:57:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:52:2b:f3:0c:a2:ce:33:4b:01:a8:47:34:0f:
d0:07:ce:23:57:86:83:2c:e6:be:42:04:3a:b6:40:
c1:12:c4:5a:42:8c:5f:20:0f:68:b5:3f:aa:8c:a1:
44:7e:f3:0a:11:d3:da:88:97:d5:04:09:2a:ef:32:
b1:cc:88:47:f9:70:43:46:db:14:0e:63:35:17:50:
9d:6c:6c:a1:17:d9:41:84:fc:10:ee:3e:20:a1:8a:
16:72:63:0f:f8:a4:9d:06:b8:d5:1c:99:1d:2a:1f:
41:f0:a5:43:c2:51:34:7d:97:64:cd:e5:4e:12:88:
90:07:c3:77:cc:d6:15:0d:da:a6:d0:f9:6d:30:9c:
69:4d:02:36:36:ca:e9:57:be:9a:78:d4:b2:47:ca:
99:42:f9:60:22:46:27:62:a3:3a:26:5b:b6:ca:ca:
ca:b8:9f:17:e6:9a:8b:b9:9e:9a:0c:8f:e1:c5:27:
b7:d0:12:57:12:94:64:d4:d4:fa:8c:b8:f3:5e:a4:
af:db:e8:69:ec:c3:1d:27:e5:5f:d8:82:0e:57:52:
62:79:28:35:74:04:d5:a2:f1:89:b3:8a:25:fb:b7:
b5:39:67:de:35:0f:a8:20:a5:17:de:08:e8:5d:07:
77:1d:fc:ac:16:79:7d:b6:38:c8:5c:80:cb:ed:a4:
e4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.44.0/22
IPv6:
2a03:4ea0::/32
Signature Algorithm: sha256WithRSAEncryption
22:80:c6:ab:74:06:e1:30:b2:b7:52:9c:13:35:29:86:7d:f8:
f6:b4:85:94:bf:17:52:34:c2:16:e2:45:da:1d:5b:5b:91:1c:
c6:c8:9d:2b:2a:48:d0:01:b5:17:6a:34:c0:a5:69:a9:23:3f:
65:67:f7:5e:09:92:52:a8:05:d3:02:c1:9c:09:d0:4f:f4:ba:
01:d4:0f:53:fb:41:a7:8b:18:e3:a8:b4:4f:8a:29:65:9b:25:
57:db:9a:6a:ea:b8:7f:11:a1:17:7b:45:28:b2:a5:7a:98:0c:
bf:7f:d2:c5:23:50:34:5d:64:65:bf:0c:df:31:98:53:ef:ea:
13:48:47:25:df:e6:0c:9f:98:f3:27:e3:88:af:01:5d:3f:4a:
a2:01:a2:a8:46:a0:f1:96:00:92:49:b2:19:eb:0b:a4:e3:33:
73:04:79:84:de:50:55:bf:5d:e2:f2:5a:be:4c:9e:52:e7:fa:
a4:ac:fc:14:4f:d5:72:20:f2:29:26:f0:9a:fd:06:0c:02:89:
ba:61:a7:13:27:2d:3a:7a:e5:86:9b:b7:f2:86:9b:da:c7:e5:
82:06:62:cb:5f:3f:a5:9d:42:f7:67:9d:d4:c0:7c:06:a8:14:
5e:7b:ab:7b:06:8a:c9:fe:54:dd:b9:e8:2a:b7:3c:a6:79:8c:
ce:a6:fb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:45:59 2025 by rpki-client