Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
File: FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer (raw, json)
Hash identifier: /r62xOS+ZJsZKsWA9OkJY9sIeTRQRFd9Mx9mz0fnKwE=
Subject key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1831777E5E8757D637E44C8652856
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 61970
AS: 208600
IP: 45.93.88.0/22
IP: 185.48.144.0/22
IP: 2a04:a6c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:83:17:77:e5:e8:75:7d:63:7e:44:c8:65:28:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a2:aa:44:d0:67:b5:80:4d:00:ee:bf:e1:5f:
f2:e1:f1:6b:f6:dc:2a:f1:b6:cf:b1:df:fa:22:84:
47:08:ee:76:f4:c0:50:5d:83:2e:4e:0a:10:a0:9d:
46:be:13:b1:88:d3:88:1f:31:85:cc:23:7c:04:47:
4a:37:7f:c5:77:69:29:3d:cd:fa:fc:ad:b7:dd:46:
6a:36:26:68:9d:af:8b:34:e3:00:03:81:2b:18:92:
fc:f1:4e:b7:97:70:75:07:5d:8e:03:ee:d3:89:b5:
88:0c:51:69:d1:f0:e8:f3:4f:6b:86:29:f1:77:bf:
e4:ad:a4:03:05:e3:5a:b6:e7:34:d5:eb:c7:77:d7:
e0:79:e1:9d:44:ae:f6:80:2e:9e:b3:25:e0:79:97:
75:5e:77:0b:f5:af:bf:b1:6a:ba:d0:b7:32:4c:20:
f1:af:62:8e:42:3b:f4:0b:58:2f:80:f3:24:fc:3a:
0e:ac:86:c4:51:77:81:83:f3:b2:e3:b6:22:dd:fa:
39:f3:84:c9:ff:b6:54:8c:60:02:1a:d0:0f:a4:2a:
c6:fe:35:cf:7f:b8:ef:d8:b0:ab:b8:87:dd:2c:4a:
ec:6f:d0:ae:7a:f4:5e:63:c8:26:a3:68:e8:0e:bd:
93:21:44:d2:8d:37:b4:69:52:bd:ce:36:c7:cc:e7:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.88.0/22
185.48.144.0/22
IPv6:
2a04:a6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61970
208600
Signature Algorithm: sha256WithRSAEncryption
8d:ce:1c:49:e9:03:c9:c6:e2:b4:e6:81:bd:41:38:67:61:5f:
4a:f4:ed:ae:e6:ba:3a:38:7c:ae:72:b4:89:8e:8f:c7:39:0f:
6f:c0:2c:c4:9c:70:9a:a9:3c:88:fd:67:bc:40:b8:13:73:a0:
91:13:5d:4e:2a:8a:c7:b3:0a:73:54:66:6c:0d:eb:ca:7b:85:
b9:0f:8d:4e:d2:b9:30:75:fc:22:76:d7:c7:16:ab:5d:a7:76:
d6:7c:51:f9:11:eb:cf:b9:87:21:34:7b:d9:ed:56:4a:98:1e:
1c:d2:2c:ce:e5:1d:4a:96:3b:40:6a:99:d8:f7:e4:eb:b6:9b:
76:cf:90:f0:a6:d7:6d:5d:ee:5d:9c:8d:b6:15:4c:2e:62:23:
83:0b:cd:c2:42:43:f3:45:b8:21:ca:4a:9f:2b:e8:10:aa:78:
62:ec:da:68:5e:c2:ee:36:30:ec:47:5d:de:af:e1:49:62:02:
ae:9f:07:70:a9:54:2c:68:34:9a:6c:0f:d4:5a:ca:72:b2:cb:
cd:3d:53:3a:40:c1:7f:88:86:64:1b:ec:c2:63:0b:a5:b5:0f:
54:a9:b3:c1:1a:5b:cc:a7:a3:58:60:f3:26:d6:bd:51:8f:7c:
b6:80:1b:05:50:ce:34:c5:1a:92:c3:6e:69:14:ad:14:e5:35:
55:6b:db:74
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZQhsYMXd+XodX1jfkTIZShWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNmQzMWIyZDg5OWQ2ZWIyYmNiN2E0ZDc4Y2MzMTAwZGNlMzBjOTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqKqRNBntYBNAO6/4V/y4fFr9twq
8bbPsd/6IoRHCO529MBQXYMuTgoQoJ1GvhOxiNOIHzGFzCN8BEdKN3/Fd2kpPc36
/K233UZqNiZona+LNOMAA4ErGJL88U63l3B1B12OA+7TibWIDFFp0fDo809rhinx
d7/kraQDBeNatuc01evHd9fgeeGdRK72gC6esyXgeZd1XncL9a+/sWq60LcyTCDx
r2KOQjv0C1gvgPMk/DoOrIbEUXeBg/Oy47Yi3fo584TJ/7ZUjGACGtAPpCrG/jXP
f7jv2LCruIfdLErsb9CuevReY8gmo2joDr2TIUTSjTe0aVK9zjbHzOcmiQIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFBbTGy2JnW6yvLek14zDEA3OMMkMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FlLzdjM2Ex
OC0wZWM5LTQxNTctYmY1YS01MjA3ZjY2NGRmMjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWUvN2MzYTE4
LTBlYzktNDE1Ny1iZjVhLTUyMDdmNjY0ZGYyMS8xL0Z0TWJMWW1kYnJLOHQ2VFhq
TU1RRGM0d3lRdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCLV1YAwQCuTCQMA0EAgACMAcDBQMqBKbAMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDyEgIDAy7YMA0GCSqGSIb3DQEBCwUAA4IB
AQCNzhxJ6QPJxuK05oG9QThnYV9K9O2u5ro6OHyucrSJjo/HOQ9vwCzEnHCaqTyI
/We8QLgTc6CRE11OKorHswpzVGZsDevKe4W5D41O0rkwdfwidtfHFqtdp3bWfFH5
EevPuYchNHvZ7VZKmB4c0izO5R1KljtAapnY9+Trtpt2z5DwptdtXe5dnI22FUwu
YiODC83CQkPzRbghykqfK+gQqnhi7NpoXsLuNjDsR13er+FJYgKunwdwqVQsaDSa
bA/UWspyssvNPVM6QMF/iIZkG+zCYwultQ9UqbPBGlvMp6NYYPMm1r1Rj3y2gBsF
UM40xRqSw25pFK0U5TVVa9t0
-----END CERTIFICATE-----
Generated at Mon Apr 21 23:11:19 2025 by rpki-client