![](/console.gif)
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7iUCbllV3N0RFHb5toSdcoGFRps.cer
File: 7iUCbllV3N0RFHb5toSdcoGFRps.cer (raw, json)
Hash identifier: vIW8GX6dgt3HDN+pUdDsASJIRGYTa3Y9vOhoibg9IDM=
Subject key identifier: EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018FBF8BC1C9761217B57EDE472EA52FD0A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 28 May 2024 14:12:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 200683
IP: 185.68.4.0/22
IP: 185.231.67.0/24
IP: 188.64.212.0/22
IP: 2a05:1400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:8b:c1:c9:76:12:17:b5:7e:de:47:2e:a5:2f:d0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 28 14:12:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee25026e5955dcdd111476f9b6849d728185469b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:04:82:5d:3b:5b:6f:9a:d2:97:1a:7c:b2:f1:
20:5e:38:58:c6:3d:01:c2:82:16:3f:d0:fd:98:d9:
06:ea:f9:af:f2:ce:7a:97:e9:41:02:e5:60:69:73:
69:66:cc:c4:25:78:36:77:97:25:9a:03:f1:83:65:
45:97:86:62:66:d9:60:0f:9d:14:4c:61:c8:03:16:
3e:e6:6f:a2:93:f2:8c:b6:25:7b:4e:d1:5a:8b:fc:
7f:95:f8:21:2b:64:aa:57:c8:45:c0:4f:65:ed:04:
6d:8b:f4:b9:58:2a:f1:24:be:13:6c:59:7a:d2:40:
b3:74:2e:1e:79:c8:eb:08:2d:47:a7:25:b2:c5:2e:
09:50:ae:07:08:7b:36:b2:cc:b2:fe:4d:41:c1:33:
87:4f:b8:49:3c:b9:3c:25:9c:17:a1:c6:fb:ff:98:
08:19:55:45:18:ed:db:58:d6:25:72:ef:00:26:5a:
60:8e:a0:c8:9e:3c:b5:3e:82:fc:94:52:b4:68:d6:
14:1d:90:d8:21:81:7f:a7:64:6d:f1:2b:8e:fd:c5:
f6:28:fe:4f:f8:25:d9:c3:c3:a1:4b:f3:95:2a:4d:
c3:3f:f0:f8:fe:5a:2a:a6:2c:df:1d:06:a5:b2:97:
8a:d0:1e:50:58:bc:be:8c:5e:74:97:37:9e:96:62:
a5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:25:02:6E:59:55:DC:DD:11:14:76:F9:B6:84:9D:72:81:85:46:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f70062-c16d-4e5c-9ae7-2a46f6fac4ca/1/7iUCbllV3N0RFHb5toSdcoGFRps.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.4.0/22
185.231.67.0/24
188.64.212.0/22
IPv6:
2a05:1400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200683
Signature Algorithm: sha256WithRSAEncryption
05:27:65:ba:9c:2e:1b:3b:bb:a1:c7:34:5f:5b:8a:de:77:d3:
bf:f2:d8:03:0f:59:e3:df:4e:52:ee:6a:8e:ad:03:d8:57:d0:
e3:c4:04:32:b8:43:3d:c8:1e:ec:79:6f:cb:f6:11:96:ac:fb:
84:80:05:ff:f2:ff:52:24:6f:85:f0:3b:66:10:85:19:54:32:
1f:33:7d:7b:d7:08:f5:89:c2:93:f7:db:25:9f:91:ed:0d:28:
42:09:72:82:09:f5:fc:0f:fc:12:c7:83:e8:63:cc:a2:d8:0d:
95:f5:93:c8:7a:79:78:d2:af:e5:1f:a9:9a:3b:d5:0b:c2:86:
55:50:03:26:c3:f2:da:70:db:4e:f9:65:cf:dc:16:6b:b5:3a:
01:ef:d2:bb:1a:06:13:79:77:76:26:af:9e:56:d6:30:e0:46:
bd:7d:cb:0c:55:c3:2e:44:5e:25:3a:77:3f:91:3c:ee:04:44:
8a:1a:7b:1b:52:0a:43:84:37:fb:ad:8e:d6:fb:57:8f:3d:d4:
fd:75:ca:21:b3:f7:d0:dd:87:ed:87:5b:95:10:c0:00:31:01:
b5:a9:94:60:68:8f:9e:df:6a:d5:db:0d:54:42:6c:7a:af:b2:
78:d4:71:8a:da:d8:9a:6d:04:f7:f2:7d:a6:8a:d5:48:1f:98:
4d:a0:fd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 20:56:46 2024 by rpki-client on console-fra.rpki-client.org