Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer
File: 7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer (raw, json)
Hash identifier: frjf3lFfqV4V3h4MN4AD01IvxTDTe94zlmlHjawa/fc=
Subject key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427482122BB6FC00F747D380C5A70C942
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12561
IP: 46.31.8.0/21
IP: 195.238.68.0/23
IP: 195.238.78.0/23
IP: 2a02:4980::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:21:22:bb:6f:c0:0f:74:7d:38:0c:5a:70:c9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f8:93:ce:5f:fc:c7:a5:cd:c1:98:4d:ab:4f:
33:da:e9:1a:1b:74:cf:f5:03:96:ad:00:81:25:e6:
6e:5e:77:0a:a6:78:5b:2d:fe:db:eb:5f:22:97:8d:
15:8a:1c:ed:4b:86:0e:c2:e3:4d:91:6b:fc:f1:00:
72:89:c3:a2:1f:bf:14:66:3a:d8:06:99:67:7b:4b:
a2:f6:18:cf:51:c5:71:2d:a0:16:41:c6:12:1d:c9:
0d:96:d7:86:63:b2:28:f5:2c:d2:29:5d:ff:cb:43:
2e:93:8c:8f:bf:66:ee:9d:1f:32:1e:3c:66:ba:93:
a3:0a:fb:16:9b:fd:ab:cb:db:38:72:98:5d:eb:aa:
da:68:12:b1:8a:02:c6:a1:26:f0:fa:38:e3:c2:a5:
fd:b7:68:87:a6:ab:27:2e:2e:93:91:7c:02:a2:bc:
45:35:54:a7:32:5f:fb:b5:b0:fd:33:b0:fd:ec:b1:
ce:67:7e:71:e1:51:47:37:06:12:8e:47:8b:92:f6:
64:b1:e3:9d:b4:99:44:3d:c6:5c:be:5d:23:9f:19:
4a:89:3b:33:40:ff:52:49:01:57:56:12:ed:91:a8:
92:35:6a:67:e8:63:8b:a1:1d:83:b1:7a:f5:d0:dc:
cb:90:7b:f2:fb:9a:cb:75:b2:ba:97:cc:87:e7:1a:
5b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.8.0/21
195.238.68.0/23
195.238.78.0/23
IPv6:
2a02:4980::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12561
Signature Algorithm: sha256WithRSAEncryption
52:85:15:96:e8:53:ef:0f:2e:78:94:cc:00:7b:48:5d:71:c8:
37:cc:9b:ed:b6:3e:f1:80:82:2a:29:d9:e6:e7:da:23:f9:5f:
ad:7a:39:11:03:b5:5a:4d:51:30:5e:c7:f1:7d:dc:fe:f7:ab:
59:e6:86:13:d6:b9:c7:8f:76:e7:b2:13:9b:5e:9d:e0:4f:1d:
18:44:25:c5:bf:37:58:e9:fd:1e:05:ce:32:8d:64:52:97:ea:
39:92:a8:d2:d0:97:6c:93:b9:c1:91:bb:99:9a:cd:d5:f1:37:
09:87:e3:8a:f8:d6:b2:2b:81:bd:7c:27:8f:db:db:23:84:d3:
0e:26:55:e5:04:ce:db:bb:58:97:16:fc:37:f1:78:d1:bd:82:
71:75:1a:48:24:9a:5e:fc:e1:e8:a1:dd:89:d2:ad:d9:13:96:
c9:9d:aa:4f:31:77:28:d4:cb:0f:49:16:a9:79:ec:a8:a9:13:
e4:2d:71:f5:64:3e:5a:c9:7e:63:20:c8:93:08:9d:37:cd:01:
9e:c1:fe:d7:d3:98:39:90:84:6a:be:64:af:fa:7d:6c:f6:5b:
7a:9e:33:1c:68:fc:35:4c:ab:8e:a8:e2:f2:90:99:82:25:22:
a8:45:85:dd:8e:6a:5e:eb:fd:f1:49:2e:0e:ca:27:d5:ed:d7:
55:14:ca:97
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZQnSCEiu2/AD3R9OAxacMlCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZWQ1YjNhZjAwNjQ5ODFlOTZiYjVlMjdkOGYwNGQ4NmU2MzA2Y2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/iTzl/8x6XNwZhNq08z2ukaG3TP
9QOWrQCBJeZuXncKpnhbLf7b618il40VihztS4YOwuNNkWv88QByicOiH78UZjrY
Bplne0ui9hjPUcVxLaAWQcYSHckNlteGY7Io9SzSKV3/y0Muk4yPv2bunR8yHjxm
upOjCvsWm/2ry9s4cphd66raaBKxigLGoSbw+jjjwqX9t2iHpqsnLi6TkXwCorxF
NVSnMl/7tbD9M7D97LHOZ35x4VFHNwYSjkeLkvZkseOdtJlEPcZcvl0jnxlKiTsz
QP9SSQFXVhLtkaiSNWpn6GOLoR2DsXr10NzLkHvy+5rLdbK6l8yH5xpbMwIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFO7Vs68AZJgelrteJ9jwTYbmMGz6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAxLzNhYWJl
MC05ZTVmLTQ5OGQtYjU1MC0wMzBhY2QzYWUzMzYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDEvM2FhYmUw
LTllNWYtNDk4ZC1iNTUwLTAzMGFjZDNhZTMzNi8xLzd0V3pyd0JrbUI2V3UxNG4y
UEJOaHVZd2JQby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQDLh8IAwQBw+5EAwQBw+5OMA0EAgACMAcDBQAq
AkmAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjERMA0GCSqGSIb3DQEBCwUAA4IB
AQBShRWW6FPvDy54lMwAe0hdccg3zJvttj7xgIIqKdnm59oj+V+tejkRA7VaTVEw
Xsfxfdz+96tZ5oYT1rnHj3bnshObXp3gTx0YRCXFvzdY6f0eBc4yjWRSl+o5kqjS
0Jdsk7nBkbuZms3V8TcJh+OK+NayK4G9fCeP29sjhNMOJlXlBM7bu1iXFvw38XjR
vYJxdRpIJJpe/OHood2J0q3ZE5bJnapPMXco1MsPSRapeeyoqRPkLXH1ZD5ayX5j
IMiTCJ03zQGewf7X05g5kIRqvmSv+n1s9lt6njMcaPw1TKuOqOLykJmCJSKoRYXd
jmpe6/3xSS4OyifV7ddVFMqX
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:21:01 2025 by rpki-client