Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
File: 912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer (raw, json)
Hash identifier: AQY8px5zkPiuD6bBFfqmkjfSN5xjmTJWcDIOuHs/KQo=
Subject key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274845B4F950E783ACADF566DD430F03
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a09:3700::/29
IP: 2a09:da40::/29
IP: 2a0c:ac0::/29
IP: 2a0d:adc0::/29
IP: 2a0e:dfc0::/29
IP: 2a11:21c0::/29
IP: 2a11:3080::/29
IP: 2a11:35c0::/29
IP: 2a11:3d00::/29
IP: 2a11:5a40::/29
IP: 2a11:7080::/29
IP: 2a11:d380::/29
IP: 2a11:d700::/29
IP: 2a12:1540::/29
IP: 2a12:24c0::/29
IP: 2a12:35c0::/29
IP: 2a12:41c0::/29
IP: 2a12:7300::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:45:b4:f9:50:e7:83:ac:ad:f5:66:dd:43:0f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b9:b0:67:2c:35:6d:48:4d:30:5a:d1:75:bc:
6d:6c:75:ee:d3:f8:e8:cf:a7:4e:fc:83:cb:82:27:
50:64:3f:a2:66:d8:cc:a3:72:5c:8e:a6:fe:66:e7:
75:92:1c:b9:35:7b:ec:85:86:9f:6c:4f:07:b8:81:
98:18:fe:c6:b6:58:2b:a3:dd:1b:37:a9:65:b4:02:
9c:ee:ba:23:14:60:af:59:ce:82:43:b8:da:6e:46:
f3:74:26:cd:f1:25:c5:58:9c:ba:bd:fe:24:44:5b:
db:47:f3:77:25:65:8c:a1:84:30:8a:a2:27:64:a4:
39:8c:81:77:20:68:ea:b5:62:bf:85:d0:ed:cc:b4:
08:05:92:37:81:b8:00:3d:80:2c:4e:04:9e:91:ec:
c6:1c:19:85:0b:57:ed:79:33:6c:db:a4:3e:d6:99:
36:d3:71:aa:bf:5c:32:3f:e9:8a:43:70:6f:70:e2:
89:4c:10:31:9b:1d:15:03:78:82:7d:1f:7f:b6:7b:
ee:7e:9f:c1:11:03:e2:5d:ef:ef:32:62:64:17:98:
47:ab:a6:d8:e4:45:21:79:0b:e8:59:af:14:af:e5:
4b:4c:79:b4:e0:b7:06:00:23:ba:ec:41:27:c4:19:
ac:a2:bc:a5:90:a5:0f:56:5e:23:8b:41:e9:ef:99:
1b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3700::/29
2a09:da40::/29
2a0c:ac0::/29
2a0d:adc0::/29
2a0e:dfc0::/29
2a11:21c0::/29
2a11:3080::/29
2a11:35c0::/29
2a11:3d00::/29
2a11:5a40::/29
2a11:7080::/29
2a11:d380::/29
2a11:d700::/29
2a12:1540::/29
2a12:24c0::/29
2a12:35c0::/29
2a12:41c0::/29
2a12:7300::/29
Signature Algorithm: sha256WithRSAEncryption
27:89:c2:dc:83:ae:fc:c6:29:69:dd:ed:7f:eb:ac:ac:1e:1b:
a7:da:86:78:4d:0c:11:c1:9e:54:4c:5e:89:73:4a:f6:44:cb:
a3:59:a7:95:60:61:e5:fe:1f:7b:7a:98:c0:89:2e:91:2d:c9:
4c:f2:6d:3f:02:c8:f2:16:a6:46:a8:7e:f1:16:80:8e:1a:0f:
8c:67:86:98:8d:5f:4b:d1:7c:0c:f6:a2:ac:1e:d4:b5:78:81:
49:aa:b0:2e:04:98:3e:dc:bf:7c:14:a7:f8:cf:96:60:be:80:
26:15:01:48:0b:89:fb:a6:b3:4b:19:58:1e:5f:d9:62:e3:d8:
42:b4:85:50:a1:4f:77:64:62:4f:df:9f:af:ff:1a:13:9e:a5:
54:6a:12:32:b9:16:85:1d:72:73:8c:76:5d:33:42:aa:1b:f6:
08:1f:c7:93:88:2d:51:15:c7:bd:95:34:cc:f1:a5:51:5c:95:
14:b2:a6:3b:69:1c:87:16:99:8a:81:db:7c:fa:5f:7c:46:fe:
6b:89:9e:db:ba:6c:b2:f1:69:29:16:ab:3c:a0:2d:c2:ca:8f:
15:10:6a:bd:f9:3c:ca:e2:66:d3:3e:74:f7:f4:91:1f:f0:6f:
0f:87:6f:0b:c0:71:d4:b8:ec:af:35:c0:26:1c:30:04:18:0e:
fb:8b:a4:7c
-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgISAZQnSEW0+VDng6yt9WbdQw8DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzVkOGI1MjgxNWYzZjI2MTNlOTQ4OTkyZWM5ZmU2NjBmNjk0OWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLmwZyw1bUhNMFrRdbxtbHXu0/jo
z6dO/IPLgidQZD+iZtjMo3Jcjqb+Zud1khy5NXvshYafbE8HuIGYGP7Gtlgro90b
N6lltAKc7rojFGCvWc6CQ7jabkbzdCbN8SXFWJy6vf4kRFvbR/N3JWWMoYQwiqIn
ZKQ5jIF3IGjqtWK/hdDtzLQIBZI3gbgAPYAsTgSekezGHBmFC1fteTNs26Q+1pk2
03Gqv1wyP+mKQ3BvcOKJTBAxmx0VA3iCfR9/tnvufp/BEQPiXe/vMmJkF5hHq6bY
5EUheQvoWa8Ur+VLTHm04LcGACO67EEnxBmsorylkKUPVl4ji0Hp75kbNwIDAQAB
o4IDADCCAvwwHQYDVR0OBBYEFPddi1KBXz8mE+lImS7J/mYPaUm0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4Lzk1MTRl
ZC0yNzZlLTRhYmEtODk3ZS1hNDQxMGUxMGI2ZjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvOTUxNGVk
LTI3NmUtNGFiYS04OTdlLWE0NDEwZTEwYjZmNS8xLzkxMkxVb0ZmUHlZVDZVaVpM
c24tWmc5cFNiUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMIGaBggrBgEF
BQcBBwEB/wSBijCBhzCBhAQCAAIwfgMFAyoJNwADBQMqCdpAAwUDKgwKwAMFAyoN
rcADBQMqDt/AAwUDKhEhwAMFAyoRMIADBQMqETXAAwUDKhE9AAMFAyoRWkADBQMq
EXCAAwUDKhHTgAMFAyoR1wADBQMqEhVAAwUDKhIkwAMFAyoSNcADBQMqEkHAAwUD
KhJzADANBgkqhkiG9w0BAQsFAAOCAQEAJ4nC3IOu/MYpad3tf+usrB4bp9qGeE0M
EcGeVExeiXNK9kTLo1mnlWBh5f4fe3qYwIkukS3JTPJtPwLI8hamRqh+8RaAjhoP
jGeGmI1fS9F8DPairB7UtXiBSaqwLgSYPty/fBSn+M+WYL6AJhUBSAuJ+6azSxlY
Hl/ZYuPYQrSFUKFPd2RiT9+fr/8aE56lVGoSMrkWhR1yc4x2XTNCqhv2CB/Hk4gt
URXHvZU0zPGlUVyVFLKmO2kchxaZioHbfPpffEb+a4me27pssvFpKRarPKAtwsqP
FRBqvfk8yuJm0z509/SRH/BvD4dvC8Bx1LjsrzXAJhwwBBgO+4ukfA==
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:55:38 2025 by rpki-client