Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
File: 1ITgzuV1xhkFP47isQBMxEL9LO0.cer (raw, json)
Hash identifier: Iw+ixMvjZgRPJe2fXW1YTUrE+BLN9JDE/nyfgHwFaSE=
Subject key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A340B4EDC6101A08638FE4ED6808D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.163.222.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:34:0b:4e:dc:61:01:a0:86:38:fe:4e:d6:80:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e7:64:ad:21:7c:95:7b:6d:20:b2:aa:32:72:
7a:1a:0f:ec:a4:94:ac:c3:62:ff:0d:ef:e7:47:ab:
50:8d:22:43:fa:b7:49:93:ce:44:3b:da:98:ae:3c:
25:17:b4:d3:c1:1f:cb:5b:34:37:6a:95:d1:e1:79:
f1:b9:6a:ce:2f:9e:a4:d4:5f:24:e9:5d:20:d0:55:
c7:2e:bf:9d:7c:3f:ed:79:62:87:13:db:82:99:ba:
9d:b3:97:c0:5e:7b:b4:e6:93:96:66:a5:87:e1:13:
65:98:c5:27:49:76:bb:8b:5d:ac:30:c1:17:6f:bb:
70:be:d5:71:d0:3f:c3:72:9e:09:98:3b:26:b7:7b:
35:ce:e1:06:18:2d:c0:45:77:68:5b:53:6f:33:7f:
14:7f:6f:05:41:aa:67:bd:91:35:65:9b:43:5b:39:
47:89:d5:4d:b8:88:60:31:17:65:58:7a:81:5f:d4:
00:8e:c6:dc:bf:5b:14:58:a3:ef:6c:bf:86:92:27:
d3:46:d0:44:20:1e:87:94:33:a4:fd:f1:36:e9:2f:
27:a3:3c:6a:ad:ac:4f:8d:de:5d:2e:4e:1f:76:c0:
57:20:e1:b5:81:9a:17:65:9b:08:34:9a:d3:06:e1:
b2:78:56:6a:79:0a:b8:5b:7d:14:99:d9:ba:d6:82:
a5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.222.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:7b:da:aa:d4:72:df:83:83:94:ee:fc:99:8e:58:94:62:6a:
36:dc:dd:af:21:91:71:eb:71:c0:3e:53:7b:d6:62:3d:ee:35:
fa:73:b8:8f:bd:3b:ff:8f:0d:15:3e:55:69:ff:d6:04:cd:20:
1a:1d:e9:18:db:fe:27:81:f7:ab:8c:cb:72:98:02:c7:7e:10:
3e:e8:c3:e4:66:97:9b:40:93:fd:db:f1:8f:e6:e7:ec:87:11:
23:37:b1:cd:23:45:f7:fa:91:6e:8e:39:d8:48:06:62:6c:a0:
e8:d7:09:9b:7e:7e:33:81:7f:c2:f6:ed:cd:d9:fa:3e:94:03:
c0:1c:88:b9:cb:ec:15:f7:09:1f:0f:28:b2:58:fd:6a:73:82:
7d:8d:9f:e1:2b:5e:b0:ba:df:f4:1c:12:a3:00:81:35:c6:da:
b1:32:ed:a2:02:f4:77:35:e2:b0:cf:40:59:f7:49:af:cb:18:
42:bc:89:bd:70:8e:2f:fa:53:25:2b:7a:f0:08:1e:b9:d9:e2:
14:b8:e4:34:7d:01:1e:6f:54:c6:e9:fe:36:b1:f5:50:6d:c6:
2c:c0:fc:88:09:cf:fe:41:e7:24:01:92:1c:61:09:ca:37:b1:
8c:f9:a1:47:a7:56:a8:5b:87:d8:6c:40:93:d5:3e:64:d6:a2:
cf:d5:03:28
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQjajQLTtxhAaCGOP5O1oCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDg0ZTBjZWU1NzVjNjE5MDUzZjhlZTJiMTAwNGNjNDQyZmQyY2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuudkrSF8lXttILKqMnJ6Gg/spJSs
w2L/De/nR6tQjSJD+rdJk85EO9qYrjwlF7TTwR/LWzQ3apXR4XnxuWrOL56k1F8k
6V0g0FXHLr+dfD/teWKHE9uCmbqds5fAXnu05pOWZqWH4RNlmMUnSXa7i12sMMEX
b7twvtVx0D/Dcp4JmDsmt3s1zuEGGC3ARXdoW1NvM38Uf28FQapnvZE1ZZtDWzlH
idVNuIhgMRdlWHqBX9QAjsbcv1sUWKPvbL+GkifTRtBEIB6HlDOk/fE26S8nozxq
raxPjd5dLk4fdsBXIOG1gZoXZZsINJrTBuGyeFZqeQq4W30Umdm61oKlWwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFNSE4M7ldcYZBT+O4rEATMRC/SztMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJkLzc4NDdm
Yi1mNTVhLTQ5OTUtODUzMS1lYzAyNjJhYjMzZjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvNzg0N2Zi
LWY1NWEtNDk5NS04NTMxLWVjMDI2MmFiMzNmMS8xLzFJVGd6dVYxeGhrRlA0N2lz
UUJNeEVMOUxPMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwaPeMA0GCSqGSIb3DQEBCwUAA4IBAQANe9qq
1HLfg4OU7vyZjliUYmo23N2vIZFx63HAPlN71mI97jX6c7iPvTv/jw0VPlVp/9YE
zSAaHekY2/4ngferjMtymALHfhA+6MPkZpebQJP92/GP5ufshxEjN7HNI0X3+pFu
jjnYSAZibKDo1wmbfn4zgX/C9u3N2fo+lAPAHIi5y+wV9wkfDyiyWP1qc4J9jZ/h
K16wut/0HBKjAIE1xtqxMu2iAvR3NeKwz0BZ90mvyxhCvIm9cI4v+lMlK3rwCB65
2eIUuOQ0fQEeb1TG6f42sfVQbcYswPyICc/+QeckAZIcYQnKN7GM+aFHp1aoW4fY
bECT1T5k1qLP1QMo
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:46:56 2025 by rpki-client