Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
File: n5FENjC-1KQYJ6zlcHmpR6yHy74.cer (raw, json)
Hash identifier: xH0z1y9hm+xKJKLcvGZx58wHIA5fF2ZtGVWkJL0PmC4=
Subject key identifier: 9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01965D0D4C5CE300FB55B79C8594A90B5A55
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Apr 2025 10:31:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205622
IP: 185.198.160.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:0d:4c:5c:e3:00:fb:55:b7:9c:85:94:a9:0b:5a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 22 10:31:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f91443630bed4a41827ace57079a947ac87cbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:22:e6:65:cb:df:24:ed:8b:a0:87:99:75:
88:f0:6e:ca:5d:8f:33:f6:f9:ee:84:d0:4b:52:14:
2a:fd:0f:da:ea:85:d6:9b:62:e4:1a:e3:e0:f5:cb:
f1:a3:4f:98:a1:cd:b3:58:61:95:e9:45:87:18:87:
23:bd:c1:ab:b2:ba:3f:a5:bd:3e:78:f8:99:03:ca:
c6:ff:3d:f7:4e:51:0b:d0:17:f7:23:65:df:95:65:
d2:10:92:2c:25:0f:c0:66:09:74:f3:83:f8:1b:65:
01:34:de:52:da:c2:a4:97:8a:6c:7a:81:0e:4c:ba:
8d:85:6a:8c:be:46:99:59:fd:84:46:3d:c1:50:1c:
88:6d:9f:19:62:06:19:33:20:c3:ae:64:17:84:65:
9c:73:d9:5b:62:0a:e1:21:19:1d:32:0e:58:ab:38:
88:a6:27:e3:47:c9:a2:e8:01:d8:f9:52:0c:02:45:
9b:68:f0:87:41:30:36:d4:26:3a:c5:c1:a4:3e:3d:
ba:92:5c:c8:1b:c8:44:54:12:54:71:74:9b:5a:e8:
65:6b:00:22:5f:38:ac:2f:b5:96:4d:ad:4d:4d:9a:
6b:a6:52:b4:4f:99:86:91:48:4d:4a:29:42:80:43:
b4:75:29:92:ac:70:5b:db:2f:db:8b:7c:c1:76:d5:
7c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.160.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205622
Signature Algorithm: sha256WithRSAEncryption
65:d2:d4:68:91:5a:71:18:02:d4:1d:54:10:55:61:5c:79:d5:
8e:22:21:2a:b8:f9:63:4a:6a:c5:49:1f:1a:9e:9e:a5:d5:67:
ad:6e:4b:4d:5f:00:4c:e3:7c:19:d0:21:55:a0:f3:ef:5d:72:
7d:2c:7e:1d:bf:9a:14:c7:44:ec:6a:0d:4b:fa:37:07:60:50:
90:8f:8b:46:b8:5f:0e:0e:f6:8d:f8:53:a0:44:05:51:bd:da:
ae:d6:14:b7:e6:76:db:6d:e0:aa:f4:32:fb:a1:23:8d:34:42:
68:30:1b:6d:a0:1d:1c:3c:78:25:f1:8a:72:e9:19:4f:f5:34:
99:76:2a:15:9a:5f:b5:2b:31:05:a5:67:43:6c:20:a4:f7:9b:
bc:d7:27:cb:96:88:20:59:f9:1e:58:65:dd:34:e8:6a:cf:88:
4a:91:26:5e:1c:52:a0:cb:5c:a2:93:7b:9d:ae:ab:8b:28:e1:
b8:52:84:f3:70:ed:62:42:41:46:7c:01:01:9b:8a:cc:cf:d8:
5d:bd:47:18:36:d7:8e:62:81:01:8e:a1:b8:8d:37:28:b7:b7:
d7:8c:82:36:62:34:21:fb:a1:c5:98:9d:fc:57:c6:af:68:b7:
a8:da:b4:20:dc:30:7f:80:97:39:ad:48:6e:94:4e:cb:0e:0a:
21:23:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 23:32:45 2025 by rpki-client