Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RZR46fHzCyT9FxmNHKyDW8Hk368.cer
File: RZR46fHzCyT9FxmNHKyDW8Hk368.cer (raw, json)
Hash identifier: 0SXtACbZocZq1O7xBqtnY65eKJmtUyIyXJMCUUFwQsQ=
Subject key identifier: 45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01951E3D12027B6D4D91C395F2AB6730D298
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 19 Feb 2025 12:44:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 77.95.220.0/24
IP: 2a13:fbc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1e:3d:12:02:7b:6d:4d:91:c3:95:f2:ab:67:30:d2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 19 12:44:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=459478e9f1f30b24fd17198d1cac835bc1e4dfaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1c:ce:39:b6:b9:0a:05:99:4c:d8:d5:c5:04:
2b:45:00:93:e2:dd:7c:25:ac:9d:0c:a9:38:4c:9a:
98:ae:29:96:57:f7:35:b2:92:ce:f3:be:c6:e1:b5:
6c:bd:81:75:0d:7a:92:73:bc:82:cd:72:63:06:07:
2e:ea:54:00:c7:90:48:e3:a1:bc:57:af:9b:6e:15:
07:19:0a:00:33:33:9e:3c:f4:c4:ba:31:b4:4c:4d:
81:c8:10:a0:ec:de:1a:74:45:71:e9:57:89:92:65:
12:48:9c:38:95:5f:e1:34:f1:02:61:2e:22:60:16:
43:cc:53:e8:71:06:39:21:dd:84:7a:e2:f9:50:cb:
26:2b:cc:23:26:96:02:c6:9b:e8:be:c9:cd:f6:79:
6a:29:b8:15:70:dc:9e:0d:c2:67:86:e0:13:ca:14:
93:fb:c8:a8:91:37:b1:14:83:49:71:b7:7d:bb:aa:
23:71:85:1d:5e:b9:39:ab:74:44:84:b2:90:1a:1c:
df:9a:c3:50:f7:59:8e:63:27:15:57:5d:0e:4f:9f:
53:e1:7b:b6:bc:8d:8e:fe:20:e7:99:80:f5:9d:c8:
ae:bc:51:c3:04:12:f9:e1:f9:70:16:c7:f5:ff:5b:
f7:c7:c5:66:80:52:79:65:78:8e:16:ae:f4:5d:9b:
44:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:94:78:E9:F1:F3:0B:24:FD:17:19:8D:1C:AC:83:5B:C1:E4:DF:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/45a9c8-a257-47c3-be6f-677f51ebbd85/1/RZR46fHzCyT9FxmNHKyDW8Hk368.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.220.0/24
IPv6:
2a13:fbc0::/29
Signature Algorithm: sha256WithRSAEncryption
7a:71:cd:95:1d:fa:86:5a:8f:5e:7f:f9:5c:b6:b6:22:98:c2:
5f:9d:e0:14:75:f2:6b:8f:a7:1c:c1:8b:5d:84:53:5a:91:89:
38:c9:7e:ca:b1:c8:a2:78:84:bb:1c:c6:7b:69:30:f5:84:cb:
11:54:a2:38:6e:f1:97:bb:97:a6:b1:4c:18:62:f8:7d:89:eb:
9a:17:08:b1:f2:aa:23:33:7b:d6:e6:bd:57:b5:f0:c0:9d:31:
3c:0b:3b:7a:cb:7d:2c:38:f1:fe:08:28:b3:40:f1:8a:27:fc:
04:fe:c6:6e:45:27:d3:12:4e:83:e1:01:d7:53:ef:89:6a:92:
76:76:4c:a7:5e:cc:31:ba:4f:19:4a:58:8b:4c:5a:15:ef:77:
f6:6d:39:f0:3b:51:9c:ab:c7:e6:e7:2b:ec:68:f3:35:ad:a2:
2c:72:a2:32:8b:65:f9:be:c6:09:c3:f5:28:bd:19:16:7d:16:
93:1b:57:e8:86:a7:13:4d:1d:76:d2:68:88:51:2f:73:6c:20:
16:7d:b8:07:36:68:72:89:b2:35:d4:30:2b:d2:61:05:53:d0:
d0:52:41:0c:fc:ca:b7:e6:da:a8:d5:04:48:e3:5c:5f:f8:48:
de:03:e6:47:63:ff:cc:3e:db:9e:9f:97:23:cc:e4:68:7a:3b:
24:6f:85:02
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZUePRICe21NkcOV8qtnMNKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjE5MTI0NDMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTk0NzhlOWYxZjMwYjI0ZmQxNzE5OGQxY2FjODM1YmMxZTRkZmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BzOOba5CgWZTNjVxQQrRQCT4t18
JaydDKk4TJqYrimWV/c1spLO877G4bVsvYF1DXqSc7yCzXJjBgcu6lQAx5BI46G8
V6+bbhUHGQoAMzOePPTEujG0TE2ByBCg7N4adEVx6VeJkmUSSJw4lV/hNPECYS4i
YBZDzFPocQY5Id2EeuL5UMsmK8wjJpYCxpvovsnN9nlqKbgVcNyeDcJnhuATyhST
+8iokTexFINJcbd9u6ojcYUdXrk5q3REhLKQGhzfmsNQ91mOYycVV10OT59T4Xu2
vI2O/iDnmYD1nciuvFHDBBL54flwFsf1/1v3x8VmgFJ5ZXiOFq70XZtEhQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFEWUeOnx8wsk/RcZjRysg1vB5N+vMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2M4LzQ1YTlj
OC1hMjU3LTQ3YzMtYmU2Zi02NzdmNTFlYmJkODUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzgvNDVhOWM4
LWEyNTctNDdjMy1iZTZmLTY3N2Y1MWViYmQ4NS8xL1JaUjQ2Zkh6Q3lUOUZ4bU5I
S3lEVzhIazM2OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQATV/cMA0EAgACMAcDBQMqE/vAMA0GCSqGSIb3
DQEBCwUAA4IBAQB6cc2VHfqGWo9ef/lctrYimMJfneAUdfJrj6ccwYtdhFNakYk4
yX7KsciieIS7HMZ7aTD1hMsRVKI4bvGXu5emsUwYYvh9ieuaFwix8qojM3vW5r1X
tfDAnTE8Czt6y30sOPH+CCizQPGKJ/wE/sZuRSfTEk6D4QHXU++JapJ2dkynXswx
uk8ZSliLTFoV73f2bTnwO1Gcq8fm5yvsaPM1raIscqIyi2X5vsYJw/UovRkWfRaT
G1fohqcTTR120miIUS9zbCAWfbgHNmhyibI11DAr0mEFU9DQUkEM/Mq35tqo1QRI
41xf+EjeA+ZHY//MPtuen5cjzORoejskb4UC
-----END CERTIFICATE-----
Generated at Sun Apr 20 20:11:50 2025 by rpki-client