Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer
File: 7P2OqrWurDzpQf4SWFmzKjUlE0Q.cer (raw, json)
Hash identifier: u4BOQBRufHCWprGhbHAHsrEe2DjhUZI1t5eiiHZTJC8=
Subject key identifier: EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C1E7D87DD1BD072923E71601FCB06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212568
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1e:7d:87:dd:1b:d0:72:92:3e:71:60:1f:cb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecfd8eaab5aeac3ce941fe125859b32a35251344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e3:fe:f8:0b:41:b8:7b:b3:ef:f0:fd:96:01:
f5:64:82:2d:a2:d8:73:15:a2:1c:76:1a:0a:b0:5c:
5f:b6:30:a1:b9:05:fa:ec:63:48:92:18:44:93:51:
8d:8c:d1:23:7e:f1:d5:eb:83:91:ec:ae:99:1f:15:
af:41:08:52:8a:b1:98:d7:e5:43:b6:e4:a2:79:13:
79:99:e7:5c:3c:b8:63:98:ac:f8:80:76:1f:4d:5d:
f5:52:22:9a:05:63:8d:e9:74:bb:61:d9:5d:50:d9:
bb:d0:b5:89:84:6d:94:56:47:cf:f9:21:ee:0c:9c:
22:6d:d1:74:3e:75:c3:43:35:63:26:19:76:50:27:
d7:6a:b8:6a:15:50:c7:75:f1:5a:92:2f:f6:fa:bc:
69:ce:95:65:c1:71:6d:df:d8:a0:7e:72:51:bc:33:
96:2b:57:07:4f:b0:30:96:fa:c8:d0:b2:06:83:e8:
78:04:f7:f8:21:b2:4e:c8:8a:56:29:9b:c8:71:e3:
d1:d2:81:87:a9:46:41:37:0e:dd:dc:bb:74:7b:a9:
d6:05:bc:88:43:80:28:a8:27:e2:19:7e:dd:4f:73:
94:eb:2b:d3:91:3f:08:0a:e4:c7:e6:7f:d3:e6:4c:
09:ae:0b:b2:bb:c3:12:44:26:b2:cf:b7:c0:64:76:
d8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FD:8E:AA:B5:AE:AC:3C:E9:41:FE:12:58:59:B3:2A:35:25:13:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bb883a-486d-4975-8dbc-d4b90b6f4659/1/7P2OqrWurDzpQf4SWFmzKjUlE0Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212568
Signature Algorithm: sha256WithRSAEncryption
8b:58:c2:78:bf:f2:10:6b:b8:3a:ce:9f:75:46:60:e5:4a:fd:
27:24:df:bb:0c:df:cf:1d:1a:a9:9f:f6:44:71:96:38:f2:2b:
a7:88:8b:68:c9:8e:75:a9:c8:47:55:3f:ff:f0:fd:1e:1a:f3:
6d:50:c9:61:21:84:66:ea:bd:db:e1:f8:20:f2:43:69:4a:30:
78:90:26:fd:a0:d2:54:83:7e:af:2a:d8:0c:f2:de:c0:26:c1:
eb:f8:7d:ea:32:c0:99:f9:63:a3:21:1a:e8:dd:80:9b:ae:29:
78:c3:cc:e4:46:d1:09:68:da:07:10:0c:55:cc:bc:13:d4:6f:
6e:e7:70:bd:0a:c0:f4:64:84:91:3f:f7:ff:27:f3:bb:d9:06:
67:c5:06:22:47:ce:6c:c0:11:11:dc:3c:80:c3:2e:fa:3c:0c:
cb:c6:cb:df:ce:8b:de:4f:7b:3b:3a:a2:ec:5c:23:da:7c:34:
95:61:87:b3:c7:8a:59:ec:34:27:0d:2e:e0:47:b5:8a:68:e3:
3f:11:3a:0d:8f:df:92:4c:68:de:97:de:9d:68:b2:2a:53:7d:
8e:4a:26:45:d0:a6:d4:39:cd:ec:04:a1:04:08:a9:a8:f0:19:
4c:26:ff:e8:cb:a7:fd:83:4d:10:48:b5:87:51:f4:b6:b7:65:
b8:72:ac:f2
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQfjB59h90b0HKSPnFgH8sGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2ZkOGVhYWI1YWVhYzNjZTk0MWZlMTI1ODU5YjMyYTM1MjUxMzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleP++AtBuHuz7/D9lgH1ZIItothz
FaIcdhoKsFxftjChuQX67GNIkhhEk1GNjNEjfvHV64OR7K6ZHxWvQQhSirGY1+VD
tuSieRN5medcPLhjmKz4gHYfTV31UiKaBWON6XS7YdldUNm70LWJhG2UVkfP+SHu
DJwibdF0PnXDQzVjJhl2UCfXarhqFVDHdfFaki/2+rxpzpVlwXFt39igfnJRvDOW
K1cHT7AwlvrI0LIGg+h4BPf4IbJOyIpWKZvIcePR0oGHqUZBNw7d3Lt0e6nWBbyI
Q4AoqCfiGX7dT3OU6yvTkT8ICuTH5n/T5kwJrguyu8MSRCayz7fAZHbY0wIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFOz9jqq1rqw86UH+ElhZsyo1JRNEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBmL2JiODgz
YS00ODZkLTQ5NzUtOGRiYy1kNGI5MGI2ZjQ2NTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvYmI4ODNh
LTQ4NmQtNDk3NS04ZGJjLWQ0YjkwYjZmNDY1OS8xLzdQMk9xcld1ckR6cFFmNFNX
Rm16S2pVbEUwUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM+WDANBgkqhkiG9w0BAQsFAAOCAQEAi1jCeL/yEGu4
Os6fdUZg5Ur9JyTfuwzfzx0aqZ/2RHGWOPIrp4iLaMmOdanIR1U///D9HhrzbVDJ
YSGEZuq92+H4IPJDaUoweJAm/aDSVIN+ryrYDPLewCbB6/h96jLAmfljoyEa6N2A
m64peMPM5EbRCWjaBxAMVcy8E9RvbudwvQrA9GSEkT/3/yfzu9kGZ8UGIkfObMAR
Edw8gMMu+jwMy8bL386L3k97Ozqi7Fwj2nw0lWGHs8eKWew0Jw0u4Ee1imjjPxE6
DY/fkkxo3pfenWiyKlN9jkomRdCm1DnN7AShBAipqPAZTCb/6Mun/YNNEEi1h1H0
trdluHKs8g==
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:49:20 2025 by rpki-client