Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
File: 3EtKGKfhUaN9peTM2qnn29iOnZM.cer (raw, json)
Hash identifier: 34IdWyOo1IQj12g5NKT7PwXLNie98psGeAFi0eWdbYM=
Subject key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942445271FE2C020C734E02E8E1C80DA50
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.5.50.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:27:1f:e2:c0:20:c7:34:e0:2e:8e:1c:80:da:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:42:92:8f:f4:8f:d9:b3:a0:b0:ba:fe:4e:6e:
78:8d:e8:94:79:ae:cc:b9:cc:71:5c:53:44:58:0b:
1c:3f:c0:93:e1:13:14:07:9c:0d:56:00:7c:3f:46:
fb:0f:c6:6c:46:6d:0e:a5:91:0b:fb:f2:84:dd:0c:
5a:ad:05:c1:da:a4:d0:1c:61:ff:b4:da:64:db:b5:
65:62:ba:dd:f5:68:5c:25:7e:37:12:89:28:df:f6:
a0:d2:b9:d2:f4:01:fe:5e:70:8a:5d:1e:5d:06:92:
1a:6e:ec:29:5e:90:a3:bc:6c:8c:55:2b:14:b2:24:
ca:c2:b4:10:a5:bc:25:22:21:70:70:d5:4e:90:57:
23:fa:8d:d9:b5:52:bf:09:12:79:3a:41:dc:2d:f9:
cc:10:56:17:db:02:69:99:27:50:b5:12:ba:d8:6b:
91:cc:30:98:38:20:38:e7:a3:2e:c0:4e:86:55:30:
08:8e:08:15:b5:0f:64:6f:dd:f8:04:2a:15:00:17:
2e:de:5c:52:1b:3b:ab:fd:d1:ab:c2:bb:d1:e8:c2:
2c:a0:70:d2:1d:16:13:3f:1f:2d:b6:b2:22:bc:65:
d6:47:50:27:fb:d5:b9:c8:e7:76:65:76:04:b1:7d:
70:7d:ca:e0:1d:1c:88:dd:4b:db:c0:96:4b:59:a0:
b5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.50.0/24
Signature Algorithm: sha256WithRSAEncryption
88:fa:e0:6f:62:d1:5c:35:e3:45:c9:7b:6b:d6:ee:93:d7:b3:
c9:60:0b:ad:21:2d:41:43:d7:92:ed:85:6b:e2:90:d9:1a:6b:
14:ee:5c:f3:f4:af:ad:01:d0:be:f6:d5:5a:ca:17:16:e7:6a:
50:2b:20:2c:52:e2:bc:d7:fc:0a:a5:a3:b5:93:30:de:03:a6:
7c:ed:4d:12:5d:a5:a3:e1:fa:f0:17:ae:81:4c:9d:aa:d7:1a:
e9:ab:46:f9:dc:f3:22:06:11:bf:1d:0c:72:f9:d4:a7:d7:bc:
67:ad:fe:56:ef:47:55:be:63:98:41:ef:10:fc:9f:fb:90:8e:
84:af:4a:aa:e1:ef:62:61:72:db:2a:d0:f2:d0:72:49:b3:6a:
65:92:cb:34:57:87:c6:de:67:02:9d:58:c9:5c:11:b6:04:98:
1f:15:95:f0:76:5f:74:d7:4f:52:e3:13:6a:50:a0:c7:24:24:
cf:77:ee:3d:5b:b9:e1:a0:4d:5d:0b:9f:86:66:c1:be:46:30:
3f:ca:f1:43:68:5c:23:7f:de:9a:43:64:59:9c:24:c9:58:db:
17:c3:8d:00:ef:38:15:79:67:8a:49:74:7a:d9:30:56:2a:3a:
61:08:be:c4:02:c5:21:0f:49:40:52:b2:2f:a1:2c:61:7c:93:
1f:89:1f:3c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQkRScf4sAgxzTgLo4cgNpQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzRiNGExOGE3ZTE1MWEzN2RhNWU0Y2NkYWE5ZTdkYmQ4OGU5ZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkKSj/SP2bOgsLr+Tm54jeiUea7M
ucxxXFNEWAscP8CT4RMUB5wNVgB8P0b7D8ZsRm0OpZEL+/KE3QxarQXB2qTQHGH/
tNpk27VlYrrd9WhcJX43Eoko3/ag0rnS9AH+XnCKXR5dBpIabuwpXpCjvGyMVSsU
siTKwrQQpbwlIiFwcNVOkFcj+o3ZtVK/CRJ5OkHcLfnMEFYX2wJpmSdQtRK62GuR
zDCYOCA456MuwE6GVTAIjggVtQ9kb934BCoVABcu3lxSGzur/dGrwrvR6MIsoHDS
HRYTPx8ttrIivGXWR1An+9W5yOd2ZXYEsX1wfcrgHRyI3UvbwJZLWaC1NQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFNxLShin4VGjfaXkzNqp59vYjp2TMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzM2MWEy
MS0wYjVhLTQzNjctODQxZS0zZGQyOTNmNzRlNWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMzYxYTIx
LTBiNWEtNDM2Ny04NDFlLTNkZDI5M2Y3NGU1ZS8xLzNFdEtHS2ZoVWFOOXBlVE0y
cW5uMjlpT25aTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwgUyMA0GCSqGSIb3DQEBCwUAA4IBAQCI+uBv
YtFcNeNFyXtr1u6T17PJYAutIS1BQ9eS7YVr4pDZGmsU7lzz9K+tAdC+9tVayhcW
52pQKyAsUuK81/wKpaO1kzDeA6Z87U0SXaWj4frwF66BTJ2q1xrpq0b53PMiBhG/
HQxy+dSn17xnrf5W70dVvmOYQe8Q/J/7kI6Er0qq4e9iYXLbKtDy0HJJs2plkss0
V4fG3mcCnVjJXBG2BJgfFZXwdl90109S4xNqUKDHJCTPd+49W7nhoE1dC5+GZsG+
RjA/yvFDaFwjf96aQ2RZnCTJWNsXw40A7zgVeWeKSXR62TBWKjphCL7EAsUhD0lA
UrIvoSxhfJMfiR88
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:28:32 2025 by rpki-client