Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
File: CfDczrdPEYWs2XruqsJd2l6bCTY.cer (raw, json)
Hash identifier: utJ08u9Uct9BWj3qP+WmlGzSNJLOkW9PW/7qyO+SNeA=
Subject key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B59A12A9E491F49911D7B2EBD5529F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198218
IP: 82.205.134.0 -- 82.205.201.255
IP: 164.40.160.0/21
IP: 178.248.112.0/21
IP: 2a03:d080::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9a:12:a9:e4:91:f4:99:11:d7:b2:eb:d5:52:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b5:c8:4e:bf:5d:d6:5b:80:90:86:07:e3:04:
11:4d:d7:2e:00:ed:85:94:9b:9e:e3:ed:d4:0b:53:
b9:89:c8:2b:96:3c:3d:f1:fc:eb:40:16:6e:f4:9d:
7e:b4:93:78:b9:4c:7a:45:2f:c9:aa:54:57:17:ef:
13:c8:5a:b5:5a:78:01:89:4e:1f:58:f8:fd:a0:6c:
da:0f:ad:46:c8:e7:ba:3b:b0:72:14:5d:14:a1:1c:
c6:a8:c5:07:8f:e6:74:09:8f:a3:09:28:d9:d6:1c:
f6:0d:ba:db:9c:af:af:d8:1c:5c:22:b5:1a:3c:a9:
13:37:88:7e:ae:1a:b0:4b:64:cd:c2:8a:50:6a:0e:
59:2f:62:7f:e8:cb:a9:bb:59:2a:9d:19:11:ec:f4:
91:3f:c7:71:b5:b4:b9:ee:65:29:8f:19:e4:9f:bc:
b7:1d:7c:db:e2:8a:3f:37:6e:5e:5b:f0:ec:12:e0:
a1:87:e8:14:85:8e:e4:01:af:9c:03:ea:ee:a0:69:
62:b7:67:84:98:ef:62:ce:52:09:dc:a5:0e:91:9b:
1b:78:68:45:ca:4b:f8:4f:81:8a:9a:d5:db:51:9c:
c4:e8:03:ed:07:73:a3:2d:8f:d1:d3:53:0f:18:b8:
44:2d:a7:85:dd:ad:f6:e2:c3:82:6d:39:80:65:83:
7d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.205.134.0-82.205.201.255
164.40.160.0/21
178.248.112.0/21
IPv6:
2a03:d080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198218
Signature Algorithm: sha256WithRSAEncryption
73:ce:6a:d5:bd:61:6e:06:2a:15:fd:48:05:e4:70:7c:29:0e:
82:35:d7:4a:4a:9f:43:64:86:b7:12:bf:dc:87:9e:b2:39:7d:
20:c6:09:37:b3:7b:a0:22:9f:ef:dc:54:66:31:2b:46:bf:5d:
d6:b4:38:90:8c:ca:7c:25:46:d3:b5:a0:54:d0:50:7c:80:0b:
5b:09:4e:69:4b:47:a0:5b:6a:34:73:8e:c3:00:b1:1b:49:53:
c9:3d:50:77:bd:ae:2b:60:1c:c4:78:bf:fa:36:25:d2:5a:ea:
df:9e:40:9d:91:7e:10:97:a3:1c:22:1c:0a:df:c2:e7:17:e8:
64:0f:28:11:e5:40:80:41:a8:6d:b2:2d:25:72:fd:91:9c:d7:
6e:0b:9c:77:0f:a4:cd:f0:cf:2c:d4:7b:98:74:59:06:38:35:
45:ff:c0:ca:a6:1d:34:25:b5:d4:11:d8:37:c3:43:36:11:38:
26:fd:7e:b5:18:3a:a0:aa:cf:19:bc:ad:52:eb:5a:da:9b:fa:
e5:d9:a1:c3:0f:df:e7:09:d6:69:71:79:96:0b:bc:be:30:a0:
37:94:1b:96:73:b9:49:ff:7b:b8:b3:7d:10:2e:36:cc:7a:0e:
e9:6b:45:e9:d0:d9:6d:15:9e:06:c2:d5:79:a4:58:09:89:6d:
2c:a1:4c:88
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgISAZQntZoSqeSR9JkR17Lr1VKfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWYwZGNjZWI3NGYxMTg1YWNkOTdhZWVhYWMyNWRkYTVlOWIwOTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbXITr9d1luAkIYH4wQRTdcuAO2F
lJue4+3UC1O5icgrljw98fzrQBZu9J1+tJN4uUx6RS/JqlRXF+8TyFq1WngBiU4f
WPj9oGzaD61GyOe6O7ByFF0UoRzGqMUHj+Z0CY+jCSjZ1hz2DbrbnK+v2BxcIrUa
PKkTN4h+rhqwS2TNwopQag5ZL2J/6Mupu1kqnRkR7PSRP8dxtbS57mUpjxnkn7y3
HXzb4oo/N25eW/DsEuChh+gUhY7kAa+cA+ruoGlit2eEmO9izlIJ3KUOkZsbeGhF
ykv4T4GKmtXbUZzE6APtB3OjLY/R01MPGLhELaeF3a324sOCbTmAZYN9mQIDAQAB
o4ICwzCCAr8wHQYDVR0OBBYEFAnw3M63TxGFrNl67qrCXdpemwk2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzQ1YWMw
Zi0zODNhLTRlYjQtYjE4OC05OTYxODlmOWNlMTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvNDVhYzBm
LTM4M2EtNGViNC1iMTg4LTk5NjE4OWY5Y2UxNC8xL0NmRGN6cmRQRVlXczJYcnVx
c0pkMmw2YkNUWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEIGCCsGAQUF
BwEHAQH/BDMwMTAgBAIAATAaMAwDBAFSzYYDBAFSzcgDBAOkKKADBAOy+HAwDQQC
AAIwBwMFACoD0IAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAwZKMA0GCSqGSIb3
DQEBCwUAA4IBAQBzzmrVvWFuBioV/UgF5HB8KQ6CNddKSp9DZIa3Er/ch56yOX0g
xgk3s3ugIp/v3FRmMStGv13WtDiQjMp8JUbTtaBU0FB8gAtbCU5pS0egW2o0c47D
ALEbSVPJPVB3va4rYBzEeL/6NiXSWurfnkCdkX4Ql6McIhwK38LnF+hkDygR5UCA
Qahtsi0lcv2RnNduC5x3D6TN8M8s1HuYdFkGODVF/8DKph00JbXUEdg3w0M2ETgm
/X61GDqgqs8ZvK1S61ram/rl2aHDD9/nCdZpcXmWC7y+MKA3lBuWc7lJ/3u4s30Q
LjbMeg7pa0Xp0NltFZ4GwtV5pFgJiW0soUyI
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:21:54 2025 by rpki-client