Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer
File: 1-LPhsj40sT9vfvKx5_p32iD-ZBI.cer (raw, json)
Hash identifier: +0U+is0nh4SeGDan0RAybLbO59C7wnCCr33pR1HvsO8=
Subject key identifier: F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D2DF698DE134D1CEF71366F129322
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 134.0.72.0/21
IP: 151.106.224.0/20
IP: 185.16.216.0/22
IP: 2a03:d040::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:2d:f6:98:de:13:4d:1c:ef:71:36:6f:12:93:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8b3e1b23e34b13f6f7ef2b1e7fa77da20fe6412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:c8:66:9b:28:f3:25:d8:06:13:9f:65:21:
e1:c2:2b:5d:ad:0f:3f:6e:3c:ce:35:9b:5d:0e:b4:
07:86:94:43:83:a6:8d:03:a9:22:99:4a:50:6f:8e:
a3:05:0c:a7:bd:10:39:a5:96:9a:65:01:2c:2e:b0:
64:b5:8f:95:16:43:af:6a:bd:92:41:c7:0e:98:ba:
56:eb:a5:12:ae:dd:50:5c:b1:98:aa:1d:76:4c:d1:
73:2e:1b:0d:6f:5f:5f:eb:c0:d4:a5:32:77:5f:db:
f8:0f:8a:89:44:82:ee:10:95:5d:cf:70:27:5e:68:
ab:f0:14:ff:b6:21:e1:4c:06:91:57:dd:22:06:f7:
51:2b:7a:b8:fd:f0:01:64:63:2f:74:b2:5f:f8:e7:
17:48:36:e6:f1:f7:4c:a0:81:0a:b0:5e:11:e5:cc:
7b:2e:57:6a:57:cc:c8:0a:0d:67:e9:83:22:34:8d:
52:1f:eb:51:1f:42:8d:6d:52:fe:34:69:7d:ca:19:
74:0c:22:0f:b5:81:cb:36:70:eb:25:2e:b2:eb:2c:
c8:b4:1e:60:e2:a9:80:c2:89:8e:70:59:7a:5c:3b:
df:47:38:61:b1:02:ee:96:44:a9:2d:bb:3f:00:b5:
24:e5:d6:c8:50:a3:3c:c9:ba:54:38:54:9c:bf:8b:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B3:E1:B2:3E:34:B1:3F:6F:7E:F2:B1:E7:FA:77:DA:20:FE:64:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dcf5ed-a1cb-4963-88af-4d77298b3b3b/1/1-LPhsj40sT9vfvKx5_p32iD-ZBI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.0.72.0/21
151.106.224.0/20
185.16.216.0/22
IPv6:
2a03:d040::/32
Signature Algorithm: sha256WithRSAEncryption
65:7e:43:f8:fe:53:45:14:fa:9f:a7:6a:d6:1c:bf:43:46:4c:
79:e8:e9:13:d9:bc:e2:a1:fa:a0:75:0c:2d:20:4e:c8:ac:89:
38:94:d1:d9:48:43:46:86:d6:40:1f:04:b4:6f:0f:a7:59:ed:
de:43:79:90:07:24:27:15:30:cb:be:52:fe:e7:5f:94:a2:a8:
10:f2:ea:cf:83:c6:95:32:94:bc:ac:f1:a8:56:11:16:54:7c:
cf:b9:0c:6b:87:79:12:85:1d:97:3a:fb:32:c6:b3:45:0b:89:
ef:34:f5:03:92:eb:18:68:08:58:cc:f8:35:d1:63:66:b3:f6:
b0:7c:5b:8c:90:2f:a6:d3:21:85:dc:8d:52:7b:3e:7f:c1:92:
b4:80:e5:e8:3b:f9:83:04:72:60:cf:d1:2b:40:4a:bf:69:d2:
00:cb:39:eb:5f:92:bd:3c:a9:04:28:a4:d6:f9:aa:21:46:6b:
b9:7d:cb:5c:8c:a7:24:bf:70:01:2a:36:3f:e3:80:61:66:ad:
79:7f:40:f3:83:c1:3d:5d:d0:ce:92:7b:e0:29:32:21:82:6e:
64:8d:66:48:67:7a:c2:47:e1:e2:a5:0f:9f:23:42:96:48:b1:
cd:9d:32:3d:35:00:87:70:ae:13:de:dd:dd:38:4d:6e:b7:c0:
82:5a:a1:5b
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQijS32mN4TTRzvcTZvEpMiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGIzZTFiMjNlMzRiMTNmNmY3ZWYyYjFlN2ZhNzdkYTIwZmU2NDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIvIZpso8yXYBhOfZSHhwitdrQ8/
bjzONZtdDrQHhpRDg6aNA6kimUpQb46jBQynvRA5pZaaZQEsLrBktY+VFkOvar2S
QccOmLpW66USrt1QXLGYqh12TNFzLhsNb19f68DUpTJ3X9v4D4qJRILuEJVdz3An
Xmir8BT/tiHhTAaRV90iBvdRK3q4/fABZGMvdLJf+OcXSDbm8fdMoIEKsF4R5cx7
LldqV8zICg1n6YMiNI1SH+tRH0KNbVL+NGl9yhl0DCIPtYHLNnDrJS6y6yzItB5g
4qmAwomOcFl6XDvfRzhhsQLulkSpLbs/ALUk5dbIUKM8ybpUOFScv4uGwwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFPiz4bI+NLE/b37ysef6d9og/mQSMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlL2RjZjVl
ZC1hMWNiLTQ5NjMtODhhZi00ZDc3Mjk4YjNiM2IvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGNmNWVk
LWExY2ItNDk2My04OGFmLTRkNzcyOThiM2IzYi8xLzEtTFBoc2o0MHNUOXZmdkt4
NV9wMzJpRC1aQkkubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6BggrBgEF
BQcBBwEB/wQrMCkwGAQCAAEwEgMEA4YASAMEBJdq4AMEArkQ2DANBAIAAjAHAwUA
KgPQQDANBgkqhkiG9w0BAQsFAAOCAQEAZX5D+P5TRRT6n6dq1hy/Q0ZMeejpE9m8
4qH6oHUMLSBOyKyJOJTR2UhDRobWQB8EtG8Pp1nt3kN5kAckJxUwy75S/udflKKo
EPLqz4PGlTKUvKzxqFYRFlR8z7kMa4d5EoUdlzr7MsazRQuJ7zT1A5LrGGgIWMz4
NdFjZrP2sHxbjJAvptMhhdyNUns+f8GStIDl6Dv5gwRyYM/RK0BKv2nSAMs561+S
vTypBCik1vmqIUZruX3LXIynJL9wASo2P+OAYWateX9A84PBPV3QzpJ74CkyIYJu
ZI1mSGd6wkfh4qUPnyNClkixzZ0yPTUAh3CuE97d3ThNbrfAglqhWw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 11:39:16 2025 by rpki-client