Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer
File: Rjh8VrMx_4S8ENiskOHiwW8XI0U.cer (raw, json)
Hash identifier: uS3fVlfUQASgH8Pon8wskRwwEFB/hYSHEQ92pu+sewM=
Subject key identifier: 46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252239B145E950144FA84D003687062F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42395
IP: 91.192.96.0/22
IP: 91.198.46.0/24
IP: 185.90.224.0/22
IP: 2a05:e540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:39:b1:45:e9:50:14:4f:a8:4d:00:36:87:06:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46387c56b331ff84bc10d8ac90e1e2c16f172345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:91:8d:7d:27:97:8f:50:a3:9d:50:bb:fe:
26:f0:52:65:ad:21:02:66:97:24:b6:ff:85:09:4a:
58:e3:01:1f:92:02:99:af:12:22:c8:87:c4:ab:c8:
04:d8:e6:c7:6b:1c:56:b4:66:71:0d:70:9a:4f:6c:
93:9e:bb:55:df:e5:34:94:ea:60:45:11:71:01:ad:
75:97:4b:b4:35:3a:a0:e3:24:45:d7:42:bd:63:a1:
39:a5:bc:78:6e:0a:6f:ea:82:89:2e:87:b6:af:98:
51:25:bb:6e:78:5f:5a:0d:50:27:b8:58:64:e0:6e:
40:f8:7f:ad:dc:b2:52:51:05:f4:56:89:eb:79:ec:
4c:43:cf:f4:99:37:1f:9b:49:31:ee:7b:5d:28:88:
bb:44:56:07:a5:20:6b:eb:20:9c:f2:d0:17:11:57:
c1:0a:79:7b:bb:5c:00:1f:61:cf:81:fd:38:ae:53:
ec:35:30:5f:59:83:d0:08:87:d7:4b:cf:aa:ae:2a:
f3:ff:01:31:df:9b:4d:68:32:a4:99:4e:fc:9b:64:
2e:ec:2e:be:49:a6:46:cd:f3:ce:ce:f3:02:a4:78:
28:97:6f:58:21:3a:00:2a:1e:de:ae:e1:f6:4d:8a:
ab:9a:ef:c8:60:a7:95:3f:84:76:db:f5:74:bb:99:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:38:7C:56:B3:31:FF:84:BC:10:D8:AC:90:E1:E2:C1:6F:17:23:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1b40ff-b1e1-4951-9165-23bb39a83481/1/Rjh8VrMx_4S8ENiskOHiwW8XI0U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.96.0/22
91.198.46.0/24
185.90.224.0/22
IPv6:
2a05:e540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42395
Signature Algorithm: sha256WithRSAEncryption
93:e5:a4:3a:52:5f:de:dc:e8:65:56:98:f1:9b:23:20:28:3d:
c1:e0:0c:9b:73:50:6a:02:70:69:97:28:a3:47:ae:6e:16:aa:
ed:61:4e:c7:f1:c9:f9:ff:87:e8:c9:10:64:46:6e:72:10:5e:
19:ab:e1:36:80:3f:52:ea:eb:86:0f:63:f0:56:08:fa:77:7f:
12:b2:4a:35:b3:7e:7f:de:8e:f4:73:3f:d0:f0:2c:9f:74:01:
52:0a:34:4b:97:95:4b:bb:2f:a1:80:7d:a3:e8:32:91:96:99:
25:0a:c2:cc:16:40:ae:59:21:6a:5a:38:6f:96:d4:19:1d:5f:
b8:d4:ea:e5:41:59:a3:17:e8:5a:7a:b0:3d:a4:cc:23:dd:01:
5a:73:fb:ae:ec:9a:e8:54:e5:1c:b5:86:e7:81:07:fd:62:d9:
73:cb:55:d2:cb:28:6c:c8:da:a7:b8:4c:ba:f9:b9:e0:55:09:
e3:3f:6f:fa:61:8c:71:1b:f5:e0:6e:04:80:b3:63:b8:b2:89:
73:b3:68:42:8a:cd:50:0c:f4:a5:ab:21:9b:a0:b7:00:ac:d8:
8b:d4:3f:43:d6:19:4c:a7:78:a3:fc:eb:e9:0d:26:f2:7e:01:
df:ff:ba:09:29:b5:56:04:09:1d:c9:04:18:2a:d1:d6:29:1b:
5f:c4:71:2b
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZQlIjmxRelQFE+oTQA2hwYvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjM4N2M1NmIzMzFmZjg0YmMxMGQ4YWM5MGUxZTJjMTZmMTcyMzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUGRjX0nl49Qo51Qu/4m8FJlrSEC
Zpcktv+FCUpY4wEfkgKZrxIiyIfEq8gE2ObHaxxWtGZxDXCaT2yTnrtV3+U0lOpg
RRFxAa11l0u0NTqg4yRF10K9Y6E5pbx4bgpv6oKJLoe2r5hRJbtueF9aDVAnuFhk
4G5A+H+t3LJSUQX0VonreexMQ8/0mTcfm0kx7ntdKIi7RFYHpSBr6yCc8tAXEVfB
Cnl7u1wAH2HPgf04rlPsNTBfWYPQCIfXS8+qrirz/wEx35tNaDKkmU78m2Qu7C6+
SaZGzfPOzvMCpHgol29YIToAKh7eruH2TYqrmu/IYKeVP4R22/V0u5nDhwIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFEY4fFazMf+EvBDYrJDh4sFvFyNFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ4LzFiNDBm
Zi1iMWUxLTQ5NTEtOTE2NS0yM2JiMzlhODM0ODEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDgvMWI0MGZm
LWIxZTEtNDk1MS05MTY1LTIzYmIzOWE4MzQ4MS8xL1JqaDhWck14XzRTOEVOaXNr
T0hpd1c4WEkwVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQCW8BgAwQAW8YuAwQCuVrgMA0EAgACMAcDBQMq
BeVAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwClmzANBgkqhkiG9w0BAQsFAAOC
AQEAk+WkOlJf3tzoZVaY8ZsjICg9weAMm3NQagJwaZcoo0eubhaq7WFOx/HJ+f+H
6MkQZEZuchBeGavhNoA/Uurrhg9j8FYI+nd/ErJKNbN+f96O9HM/0PAsn3QBUgo0
S5eVS7svoYB9o+gykZaZJQrCzBZArlkhalo4b5bUGR1fuNTq5UFZoxfoWnqwPaTM
I90BWnP7ruya6FTlHLWG54EH/WLZc8tV0ssobMjap7hMuvm54FUJ4z9v+mGMcRv1
4G4EgLNjuLKJc7NoQorNUAz0pashm6C3AKzYi9Q/Q9YZTKd4o/zr6Q0m8n4B3/+6
CSm1VgQJHckEGCrR1ikbX8RxKw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:21:26 2025 by rpki-client