Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
File: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer (raw, json)
Hash identifier: Zi56sfJgIuMhxafPyTz0j0pk35g59zlKT+3K7RPUsDc=
Subject key identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067DC8A7205C117F7154671CF2CC027
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 129.70.0.0/16
IP: 192.109.134.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:dc:8a:72:05:c1:17:f7:15:46:71:cf:2c:c0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:ca:82:d0:01:5c:6a:67:f8:4f:df:19:15:
14:42:0c:ef:94:7d:da:bb:23:8b:89:4c:15:16:59:
e2:af:cb:2b:25:10:ff:0d:70:8a:2d:55:7c:91:aa:
90:e5:0d:56:63:7d:bd:bb:10:db:5c:c4:e0:45:07:
0d:5b:a8:10:82:7c:d0:65:ad:49:05:a7:9e:23:63:
39:f8:7f:f2:28:ae:17:de:47:33:c7:77:b4:7b:77:
b7:f5:96:01:60:83:77:d0:3c:64:88:51:be:d7:36:
32:45:3d:4a:78:1f:06:37:36:e5:de:c4:0c:02:84:
07:65:f2:ce:47:2f:c0:98:78:33:82:b7:11:c1:90:
77:ce:8f:f8:dd:6c:73:68:f2:d7:0a:f2:0d:5a:58:
70:1c:ee:8d:5a:68:1b:23:52:42:c2:7b:c6:3c:8c:
9b:6d:5a:35:11:8a:a3:4d:eb:58:9f:39:7f:4c:25:
8b:b8:24:5c:b5:aa:09:3f:80:a5:fd:fb:75:a2:bd:
82:88:14:69:fe:05:2e:94:15:5b:f3:6a:25:43:0e:
ff:e5:2f:44:a4:8f:1b:30:8e:77:02:06:99:81:40:
de:8e:57:89:6c:95:0c:51:39:1f:70:9e:26:bc:d5:
41:18:34:1d:af:55:7e:4a:7d:b1:bc:38:0a:42:ed:
a0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.70.0.0/16
192.109.134.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d4:32:04:a3:bb:c3:4c:a6:a3:64:ff:3f:79:2c:e9:10:da:
08:1d:75:e8:ee:d0:59:a0:b7:c5:ee:eb:b1:28:73:90:42:97:
f5:9b:a3:2b:fd:ec:a5:8a:b0:1f:fc:3d:10:25:f0:ca:b2:5f:
75:cf:49:10:d7:5d:e0:20:26:a8:cb:89:ac:f3:66:3a:14:17:
5f:eb:68:20:be:4c:ec:f9:63:b0:c6:c4:46:2e:77:08:fa:3f:
79:9c:95:aa:8d:fb:33:24:0e:3c:dd:76:22:7a:50:bc:73:e8:
6b:28:6d:3b:74:3f:f3:ee:7b:44:04:5c:dc:77:a8:21:43:95:
7b:7f:7f:4a:85:5b:4b:39:49:87:c3:a5:ea:32:52:59:e5:af:
e7:86:5f:4f:fe:8b:fc:81:2a:08:11:0c:96:31:b9:6c:6a:8e:
e1:79:25:b1:77:9f:18:f0:d0:11:7a:79:52:2c:83:95:23:c5:
9e:73:1d:81:54:22:f3:66:87:d5:14:6f:3f:91:10:9b:b0:07:
dd:e5:eb:53:1b:bb:bd:fe:88:d8:8b:40:e2:29:56:c3:a1:c0:
73:e0:5a:bf:04:60:3c:35:f7:f7:68:be:82:02:ae:29:72:9a:
60:22:f5:9e:4c:b3:a3:4d:6c:e5:be:12:5c:48:fb:c8:d1:14:
eb:eb:51:95
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgISAZQgZ9yKcgXBF/cVRnHPLMAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWQ0NzkxMmVmZDQwOWE0NmY3Y2Q0Mjc0MTgwNGM3ZDRmNWUxYWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbPKgtABXGpn+E/fGRUUQgzvlH3a
uyOLiUwVFlnir8srJRD/DXCKLVV8kaqQ5Q1WY329uxDbXMTgRQcNW6gQgnzQZa1J
BaeeI2M5+H/yKK4X3kczx3e0e3e39ZYBYIN30DxkiFG+1zYyRT1KeB8GNzbl3sQM
AoQHZfLORy/AmHgzgrcRwZB3zo/43WxzaPLXCvINWlhwHO6NWmgbI1JCwnvGPIyb
bVo1EYqjTetYnzl/TCWLuCRctaoJP4Cl/ft1or2CiBRp/gUulBVb82olQw7/5S9E
pI8bMI53AgaZgUDejleJbJUMUTkfcJ4mvNVBGDQdr1V+Sn2xvDgKQu2gsQIDAQAB
o4ICiTCCAoUwHQYDVR0OBBYEFBHUeRLv1Amkb3zUJ0GATH1PXhrVMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzgwMjVm
Ni01ZjM4LTRkZGYtOTE3ZC0xMTRjMjQwMGMzZTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvODAyNWY2
LTVmMzgtNGRkZi05MTdkLTExNGMyNDAwYzNlMy8xL0VkUjVFdV9VQ2FSdmZOUW5R
WUJNZlU5ZUd0VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCQGCCsGAQUF
BwEHAQH/BBUwEzARBAIAATALAwMAgUYDBADAbYYwDQYJKoZIhvcNAQELBQADggEB
ADXUMgSju8NMpqNk/z95LOkQ2ggddeju0Fmgt8Xu67Eoc5BCl/Wboyv97KWKsB/8
PRAl8MqyX3XPSRDXXeAgJqjLiazzZjoUF1/raCC+TOz5Y7DGxEYudwj6P3mclaqN
+zMkDjzddiJ6ULxz6GsobTt0P/Pue0QEXNx3qCFDlXt/f0qFW0s5SYfDpeoyUlnl
r+eGX0/+i/yBKggRDJYxuWxqjuF5JbF3nxjw0BF6eVIsg5UjxZ5zHYFUIvNmh9UU
bz+REJuwB93l61Mbu73+iNiLQOIpVsOhwHPgWr8EYDw19/dovoICrilymmAi9Z5M
s6NNbOW+ElxI+8jRFOvrUZU=
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:08:55 2025 by rpki-client