Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ef7lYBzyOOHdeSGsnYgpbizM3og.cer
File: Ef7lYBzyOOHdeSGsnYgpbizM3og.cer (raw, json)
Hash identifier: B0yl01PKVDOVFDIeiXNuuWQHmDEmMcLveq+5OvMRaFY=
Subject key identifier: 11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C71392958DA4DC37CC3AB660630BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212912
AS: 214383
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:71:39:29:58:da:4d:c3:7c:c3:ab:66:06:30:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11fee5601cf238e1dd7921ac9d88296e2cccde88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:c1:6e:9f:a8:16:0b:71:40:61:35:43:0a:
28:b7:76:9f:7c:d1:4f:5c:c3:9c:a7:e0:23:fa:67:
4a:c9:6f:46:0e:93:0c:32:c0:c7:d4:ac:49:e8:e9:
60:2d:ea:66:cf:0a:a6:57:bf:6e:d9:c5:50:a0:45:
72:4f:66:eb:b7:74:fd:62:26:61:d1:a3:a1:b3:e0:
07:89:9b:0e:a6:75:e8:5e:93:99:9a:3c:a3:f4:6b:
c9:91:a3:95:6d:1e:65:0d:0f:4b:e6:72:11:d6:e5:
11:9a:6e:72:62:00:5a:9f:c2:ba:f3:c4:a6:a1:28:
71:1b:4e:94:d5:0f:a7:8d:af:7d:6b:d3:1c:6a:eb:
91:b3:ee:9f:d2:d4:f9:cf:a6:2f:d5:1e:27:02:09:
d8:61:fa:25:d8:55:6c:b6:fa:a6:fb:0e:b7:4a:7a:
2e:25:d0:2d:88:75:bc:7e:8a:1c:45:6d:3f:52:a7:
7b:12:85:43:40:0d:8d:8a:ac:37:1b:be:78:26:48:
36:f8:1e:cd:5d:20:58:19:ba:8d:8e:fb:f4:3b:e5:
e9:3f:5b:18:71:fe:72:6d:21:48:5e:aa:df:24:c9:
43:09:55:45:37:df:2e:32:50:dd:29:3d:96:c6:af:
04:26:a0:05:8b:9a:00:2a:aa:77:95:f4:1d:c5:46:
9e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FE:E5:60:1C:F2:38:E1:DD:79:21:AC:9D:88:29:6E:2C:CC:DE:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a0aa18-0429-4bab-8e31-c46e0078edf7/1/Ef7lYBzyOOHdeSGsnYgpbizM3og.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212912
214383
Signature Algorithm: sha256WithRSAEncryption
69:15:18:29:68:20:72:be:fa:1b:e5:0c:ed:30:e9:7b:ff:61:
d3:13:77:59:b8:22:28:22:c8:33:a4:d7:e3:14:41:71:45:77:
35:54:35:14:3c:3c:0e:74:72:64:77:93:2f:bc:9c:b2:21:32:
41:e5:10:9f:b6:32:5f:68:a0:2a:68:38:0b:82:bf:29:50:a8:
c4:20:1d:45:4b:6b:5d:90:25:e5:8e:4c:bd:35:9d:07:f0:da:
47:da:8c:fe:64:ad:d6:9d:51:c1:57:b3:12:dc:da:d7:06:c2:
99:d3:a4:c7:e9:cb:7d:ff:c3:8d:85:d0:91:50:6b:5e:9b:6d:
5e:08:70:97:cf:f7:20:76:f7:67:7a:11:7b:59:b4:38:8e:63:
c1:1b:7e:1c:08:dd:61:8e:9f:ad:bb:09:ab:77:e9:46:5b:91:
3b:58:59:e3:5a:99:2e:da:a9:dd:60:c4:4c:19:56:9b:d1:94:
26:9e:91:2a:9e:96:54:91:60:7c:ae:55:b7:b2:bb:7e:d7:fc:
e4:98:53:0a:76:9f:cc:22:37:e5:ea:be:3b:85:59:06:7b:c4:
d3:12:17:73:a5:72:2c:e0:c4:7d:1b:06:7f:05:56:4d:53:1a:
e6:f3:53:4d:cd:a3:07:7a:17:0b:dd:53:eb:81:ed:1a:a0:31:
83:6f:2f:89
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQfjHE5KVjaTcN8w6tmBjC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWZlZTU2MDFjZjIzOGUxZGQ3OTIxYWM5ZDg4Mjk2ZTJjY2NkZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA7Bbp+oFgtxQGE1Qwoot3affNFP
XMOcp+Aj+mdKyW9GDpMMMsDH1KxJ6OlgLepmzwqmV79u2cVQoEVyT2brt3T9YiZh
0aOhs+AHiZsOpnXoXpOZmjyj9GvJkaOVbR5lDQ9L5nIR1uURmm5yYgBan8K688Sm
oShxG06U1Q+nja99a9McauuRs+6f0tT5z6Yv1R4nAgnYYfol2FVstvqm+w63Snou
JdAtiHW8foocRW0/Uqd7EoVDQA2Niqw3G754Jkg2+B7NXSBYGbqNjvv0O+XpP1sY
cf5ybSFIXqrfJMlDCVVFN98uMlDdKT2Wxq8EJqAFi5oAKqp3lfQdxUaeuwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFBH+5WAc8jjh3XkhrJ2IKW4szN6IMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I5L2EwYWEx
OC0wNDI5LTRiYWItOGUzMS1jNDZlMDA3OGVkZjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjkvYTBhYTE4
LTA0MjktNGJhYi04ZTMxLWM0NmUwMDc4ZWRmNy8xL0VmN2xZQnp5T09IZGVTR3Nu
WWdwYml6TTNvZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEIAQH/BBAwDqAMMAoCAwM/sAIDA0VvMA0GCSqGSIb3DQEBCwUAA4IBAQBpFRgp
aCByvvob5QztMOl7/2HTE3dZuCIoIsgzpNfjFEFxRXc1VDUUPDwOdHJkd5MvvJyy
ITJB5RCftjJfaKAqaDgLgr8pUKjEIB1FS2tdkCXljky9NZ0H8NpH2oz+ZK3WnVHB
V7MS3NrXBsKZ06TH6ct9/8ONhdCRUGtem21eCHCXz/cgdvdnehF7WbQ4jmPBG34c
CN1hjp+tuwmrd+lGW5E7WFnjWpku2qndYMRMGVab0ZQmnpEqnpZUkWB8rlW3srt+
1/zkmFMKdp/MIjfl6r47hVkGe8TTEhdzpXIs4MR9GwZ/BVZNUxrm81NNzaMHehcL
3VPrge0aoDGDby+J
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:25:48 2025 by rpki-client