Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7N10boF0dtVXj7y-1XTXwa0mQfE.cer
File: 7N10boF0dtVXj7y-1XTXwa0mQfE.cer (raw, json)
Hash identifier: W1KEDUbHEsfW4uaEe7k7PeSZaGTQ0zhCUxudMFl9ZCs=
Subject key identifier: EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9427EDB3DC90D2449EE62FCEEAE16
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 196963
IP: 79.170.152.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:42:7e:db:3d:c9:0d:24:49:ee:62:fc:ee:ae:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ecdd746e817476d5578fbcbed574d7c1ad2641f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:94:c5:4d:85:57:6d:12:1c:ed:ce:df:99:fc:
15:8b:74:58:dd:81:77:57:f5:95:0b:e2:88:60:c4:
95:62:2d:d7:0f:20:a3:fd:99:72:63:af:df:89:8e:
e2:8a:48:6d:26:2c:03:fb:af:12:2a:28:2c:49:14:
ac:6f:b0:ca:79:47:f7:70:f6:af:b4:f6:16:b7:48:
33:85:c8:b0:41:35:c4:ae:f0:26:4f:17:23:2e:7e:
be:64:44:9e:ab:85:1a:e6:6b:fd:be:b2:15:50:ca:
07:2a:53:17:8f:e4:d3:0a:64:8e:d6:95:ae:78:b8:
a7:12:bc:4f:b2:5e:b3:3e:d9:6e:bc:23:c2:98:2d:
b7:e6:0a:e9:8c:e1:2f:2d:5a:27:17:2d:95:42:7e:
1c:ec:51:64:94:f6:10:2f:18:74:e2:5f:45:ac:ad:
2a:98:0b:9d:03:42:63:06:11:c2:1f:18:b1:89:65:
11:c7:bf:16:2d:46:55:43:a7:ce:ed:3b:f6:c1:8c:
b3:8f:bd:b3:ff:bf:69:fa:81:b2:b7:25:d7:77:23:
c1:af:01:b5:fa:fb:55:5a:3e:4c:46:4b:7e:2e:9f:
04:90:65:78:73:d3:60:e9:2d:1f:a4:2a:e6:5d:ff:
d3:30:25:51:a9:80:2b:19:63:30:39:11:33:e9:a8:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DD:74:6E:81:74:76:D5:57:8F:BC:BE:D5:74:D7:C1:AD:26:41:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/1c7be8-573d-4519-a211-23833fe009aa/1/7N10boF0dtVXj7y-1XTXwa0mQfE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.152.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196963
Signature Algorithm: sha256WithRSAEncryption
64:81:0e:39:7c:71:95:89:d5:16:7b:f0:4d:db:69:9d:66:0a:
9a:45:09:2f:13:2b:60:a0:21:98:73:78:cb:c4:2c:50:40:05:
c6:a4:fb:fb:d3:7a:ae:af:e2:f4:61:a4:38:b7:c3:70:fe:0d:
7f:67:7a:29:9d:e2:aa:37:cc:01:c5:7a:d3:58:77:fe:4a:07:
34:db:5a:83:d9:47:aa:a7:f2:f7:e2:39:21:43:c5:ec:a5:84:
00:a4:4b:eb:92:4d:31:99:c5:d2:7c:74:42:a1:01:58:01:0f:
3f:ad:0b:2e:39:1f:4e:8b:50:52:16:cf:82:86:c5:5d:b5:f6:
84:00:ec:0f:46:bb:c6:e1:29:d6:c2:83:20:24:a7:41:97:55:
07:3c:61:83:a7:bb:1d:f5:d1:9d:72:ad:ed:cd:c8:92:82:76:
25:6d:1c:81:89:0f:c5:f2:1a:f0:f7:19:a9:0a:8f:86:c0:f9:
af:de:20:cc:39:97:ba:af:d0:11:99:5a:76:a7:2a:7b:88:d1:
4b:b6:f5:02:96:26:02:c5:0a:3c:5b:9c:5e:7a:bf:6e:03:48:
47:2a:6c:44:cd:df:94:78:6b:24:78:1d:31:31:0c:be:a2:5f:
dd:22:a8:18:a7:f2:4b:6c:c3:3e:c7:d0:97:5a:7e:52:e9:67:
e3:d2:c3:57
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQm2UJ+2z3JDSRJ7mL87q4WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2RkNzQ2ZTgxNzQ3NmQ1NTc4ZmJjYmVkNTc0ZDdjMWFkMjY0MWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopTFTYVXbRIc7c7fmfwVi3RY3YF3
V/WVC+KIYMSVYi3XDyCj/ZlyY6/fiY7iikhtJiwD+68SKigsSRSsb7DKeUf3cPav
tPYWt0gzhciwQTXErvAmTxcjLn6+ZESeq4Ua5mv9vrIVUMoHKlMXj+TTCmSO1pWu
eLinErxPsl6zPtluvCPCmC235grpjOEvLVonFy2VQn4c7FFklPYQLxh04l9FrK0q
mAudA0JjBhHCHxixiWURx78WLUZVQ6fO7Tv2wYyzj72z/79p+oGytyXXdyPBrwG1
+vtVWj5MRkt+Lp8EkGV4c9Ng6S0fpCrmXf/TMCVRqYArGWMwOREz6ajIpQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFOzddG6BdHbVV4+8vtV018GtJkHxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1LzFjN2Jl
OC01NzNkLTQ1MTktYTIxMS0yMzgzM2ZlMDA5YWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvMWM3YmU4
LTU3M2QtNDUxOS1hMjExLTIzODMzZmUwMDlhYS8xLzdOMTBib0YwZHRWWGo3eS0x
WFRYd2EwbVFmRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDT6qYMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMBYzANBgkqhkiG9w0BAQsFAAOCAQEAZIEOOXxxlYnVFnvwTdtpnWYKmkUJLxMr
YKAhmHN4y8QsUEAFxqT7+9N6rq/i9GGkOLfDcP4Nf2d6KZ3iqjfMAcV601h3/koH
NNtag9lHqqfy9+I5IUPF7KWEAKRL65JNMZnF0nx0QqEBWAEPP60LLjkfTotQUhbP
gobFXbX2hADsD0a7xuEp1sKDICSnQZdVBzxhg6e7HfXRnXKt7c3IkoJ2JW0cgYkP
xfIa8PcZqQqPhsD5r94gzDmXuq/QEZladqcqe4jRS7b1ApYmAsUKPFucXnq/bgNI
RypsRM3flHhrJHgdMTEMvqJf3SKoGKfyS2zDPsfQl1p+Uuln49LDVw==
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:34:53 2025 by rpki-client