Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7zGgVPyftLFH6KmL2n5xyBrwvP0.cer
File: 7zGgVPyftLFH6KmL2n5xyBrwvP0.cer (raw, json)
Hash identifier: RpkMsBvgb3qdgUGDD0vyKeJE0cpMUWSOOk/fQDzsbBU=
Subject key identifier: EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423690B202C37AAB325A924FBB6FAC28C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31451
IP: 2001:67c:1550::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:0b:20:2c:37:aa:b3:25:a9:24:fb:b6:fa:c2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef31a054fc9fb4b147e8a98bda7e71c81af0bcfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:31:d5:1b:8b:9f:ed:48:70:4f:45:e1:49:b3:
38:63:b6:25:cb:67:8a:77:22:a6:a5:43:13:8f:e8:
cc:e8:f7:bf:87:c5:b8:33:90:47:a9:a0:f3:d5:47:
ef:00:5d:07:55:05:f3:f3:33:76:76:a1:f8:c4:56:
ad:60:c8:a0:82:c4:a4:e2:b3:4f:95:99:7c:70:5b:
1c:f2:da:d2:21:94:29:bb:23:11:e0:2e:4b:e4:23:
1f:7e:80:31:68:46:2f:76:ed:71:58:89:8c:c9:5a:
f3:d8:78:5d:17:14:f2:82:4c:4f:19:ce:7f:48:99:
5a:d6:a7:90:70:c3:0d:5d:b8:90:27:79:eb:e3:16:
4a:28:1f:b6:2e:17:c4:ad:27:b1:8d:3a:a7:89:d0:
4e:b2:04:f9:7d:62:4d:a8:1a:3c:30:20:da:ef:89:
cc:33:c8:62:7c:d5:38:2c:a0:8f:ef:ee:b1:81:99:
5e:f2:6b:96:c8:d3:85:56:96:56:e3:30:77:a5:d6:
6b:d5:97:82:4e:ea:15:c1:d5:fb:8b:73:1d:3b:3b:
c9:32:fd:78:9f:eb:5f:3f:92:24:ff:e3:45:b8:6c:
15:11:01:1f:0d:19:1e:4a:ef:b8:02:da:f9:1c:73:
9a:2d:99:46:72:e9:40:9b:e2:84:94:43:44:42:db:
4a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:31:A0:54:FC:9F:B4:B1:47:E8:A9:8B:DA:7E:71:C8:1A:F0:BC:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4a9224-37d4-4b23-a427-271362e3f25a/1/7zGgVPyftLFH6KmL2n5xyBrwvP0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1550::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31451
Signature Algorithm: sha256WithRSAEncryption
a0:e4:35:50:54:78:32:b2:19:6c:0a:6e:1a:50:eb:b7:c6:27:
84:ad:c4:9c:1f:be:e7:fe:45:30:e6:80:2e:a4:88:bd:12:37:
e0:6f:38:a9:b3:9f:bb:52:48:d9:96:5c:a2:f0:42:95:ba:c7:
4d:23:2e:eb:6e:67:67:41:74:67:8e:dc:d5:5b:57:6c:2c:a7:
fa:79:f1:f4:be:d2:2d:47:ce:72:f2:1c:bb:bc:7f:97:a2:2c:
97:76:8b:f8:a3:13:2e:da:c7:52:42:27:8b:16:29:61:a8:a3:
e5:9a:dd:0f:a7:86:0e:f0:85:a2:42:31:e5:4e:3c:47:56:c8:
4c:41:9a:44:7d:ca:01:43:39:fb:5b:f6:c2:9a:85:08:e8:84:
6b:13:a0:30:06:fb:da:2b:3a:a1:49:00:58:0c:d8:ff:22:f6:
f5:12:09:26:12:16:48:dd:92:45:4a:c5:f6:76:d8:a4:8a:a4:
42:d2:92:8d:ea:36:3f:aa:8a:5f:f8:b6:50:b2:2b:06:0f:a1:
ae:69:74:fe:08:88:7f:be:e4:e0:c1:22:f8:97:d9:f8:c7:34:
46:e7:51:3f:fd:a3:80:d8:0b:fb:d1:98:9b:c8:b7:92:b2:c3:
1d:35:8f:62:ca:a7:ac:fc:a6:fc:c1:ad:9e:8d:b1:e6:46:0a:
bd:06:2a:d6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgISAZQjaQsgLDeqsyWpJPu2+sKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjMxYTA1NGZjOWZiNGIxNDdlOGE5OGJkYTdlNzFjODFhZjBiY2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzHVG4uf7UhwT0XhSbM4Y7Yly2eK
dyKmpUMTj+jM6Pe/h8W4M5BHqaDz1UfvAF0HVQXz8zN2dqH4xFatYMiggsSk4rNP
lZl8cFsc8trSIZQpuyMR4C5L5CMffoAxaEYvdu1xWImMyVrz2HhdFxTygkxPGc5/
SJla1qeQcMMNXbiQJ3nr4xZKKB+2LhfErSexjTqnidBOsgT5fWJNqBo8MCDa74nM
M8hifNU4LKCP7+6xgZle8muWyNOFVpZW4zB3pdZr1ZeCTuoVwdX7i3MdOzvJMv14
n+tfP5Ik/+NFuGwVEQEfDRkeSu+4Atr5HHOaLZlGculAm+KElENEQttKEwIDAQAB
o4ICojCCAp4wHQYDVR0OBBYEFO8xoFT8n7SxR+ipi9p+ccga8Lz9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRjLzRhOTIy
NC0zN2Q0LTRiMjMtYTQyNy0yNzEzNjJlM2YyNWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMvNGE5MjI0
LTM3ZDQtNGIyMy1hNDI3LTI3MTM2MmUzZjI1YS8xLzd6R2dWUHlmdExGSDZLbUwy
bjV4eUJyd3ZQMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfBVQMBkGCCsGAQUFBwEIAQH/BAowCKAG
MAQCAnrbMA0GCSqGSIb3DQEBCwUAA4IBAQCg5DVQVHgyshlsCm4aUOu3xieErcSc
H77n/kUw5oAupIi9Ejfgbzips5+7UkjZllyi8EKVusdNIy7rbmdnQXRnjtzVW1ds
LKf6efH0vtItR85y8hy7vH+XoiyXdov4oxMu2sdSQieLFilhqKPlmt0Pp4YO8IWi
QjHlTjxHVshMQZpEfcoBQzn7W/bCmoUI6IRrE6AwBvvaKzqhSQBYDNj/Ivb1Egkm
EhZI3ZJFSsX2dtikiqRC0pKN6jY/qopf+LZQsisGD6GuaXT+CIh/vuTgwSL4l9n4
xzRG51E//aOA2Av70ZibyLeSssMdNY9iyqes/Kb8wa2ejbHmRgq9BirW
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:46 2025 by rpki-client