Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EzzXwanHnILu5chqQjwXwdY8NBM.cer
File: EzzXwanHnILu5chqQjwXwdY8NBM.cer (raw, json)
Hash identifier: dlSEDCtNWZuRQg6srautR7dsR2DsxJcvUhIpLqsAPRA=
Subject key identifier: 13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521DD7B9D6E7D9C95437600F5BA629D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.5.44.0/22
IP: 2a02:7ac0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:dd:7b:9d:6e:7d:9c:95:43:76:00:f5:ba:62:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=133cd7c1a9c79c82eee5c86a423c17c1d63c3413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8f:e6:76:27:81:a6:9a:2f:21:d5:ea:41:c2:
65:cb:72:d4:e2:2b:7d:e0:f1:be:4a:b3:2a:43:1a:
4e:f0:8d:ec:5d:84:29:4c:23:c4:4a:80:60:b6:6e:
45:b1:e6:e6:3d:8c:2e:2c:c8:9d:15:85:b5:07:e8:
89:ad:69:2c:05:c5:b2:82:8f:6c:09:b3:72:ed:65:
13:65:2b:28:f1:e2:45:0e:a9:5a:3e:18:4d:fb:cb:
c6:5a:66:13:2f:b4:3a:16:73:d9:f3:3e:ce:42:56:
fe:7e:b1:99:7d:70:39:e0:f5:10:18:bf:8d:45:8d:
60:de:5b:a5:6a:6a:fe:f4:2e:7e:b8:5b:e6:6a:3f:
4e:58:11:a0:6c:36:7f:7a:a3:79:73:56:b8:db:42:
17:30:a6:39:ac:c0:7d:bd:b1:02:4c:bd:55:b3:54:
08:1c:40:69:33:98:31:a8:f0:18:29:d4:7f:ff:bb:
f3:4d:30:c0:b8:12:9e:5f:93:fc:3a:27:e0:03:53:
f4:2a:46:db:7f:b4:5c:e8:b9:c9:92:92:07:e5:0e:
69:96:ea:da:ef:b6:1a:dd:57:15:d2:9c:8a:6a:05:
21:e8:e2:3c:b2:4d:c3:d4:6e:14:63:85:50:6f:31:
ae:c0:9a:75:0e:f6:6b:54:fa:be:c9:4e:1f:54:05:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3C:D7:C1:A9:C7:9C:82:EE:E5:C8:6A:42:3C:17:C1:D6:3C:34:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82c0a2-804b-446d-ab24-4f38c656b256/1/EzzXwanHnILu5chqQjwXwdY8NBM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.44.0/22
IPv6:
2a02:7ac0::/32
Signature Algorithm: sha256WithRSAEncryption
01:29:31:15:42:f2:9e:ac:67:a1:7d:97:f4:19:4a:3f:10:8d:
8a:02:0a:58:a9:3f:f5:87:c9:28:1d:58:37:12:c0:65:f5:45:
85:df:0d:5e:c8:4e:43:61:a8:b2:0d:aa:0e:f9:5e:9a:7d:86:
94:46:d1:24:98:79:df:d6:f1:45:05:91:31:29:cc:d6:20:c5:
c0:0c:c8:ee:a9:e5:f8:19:f7:43:d7:e2:4c:a4:c0:18:b8:6d:
03:d8:15:a4:a6:83:6f:4b:8c:31:26:a1:4f:43:d1:c6:af:56:
bd:40:1b:2e:d6:44:bc:4f:be:22:9d:99:b4:74:c6:c7:06:81:
b8:a3:88:4d:61:14:b5:e5:a8:fe:cb:79:51:ba:ed:9e:6d:fd:
f1:b7:66:15:ac:9a:46:78:c8:76:1d:bf:cc:a3:6c:b9:c9:2d:
62:27:db:03:74:ce:96:e2:bc:3e:17:3a:42:e9:11:56:c8:30:
c2:32:14:06:1f:b1:1b:e5:b6:ce:51:33:ec:18:12:1c:ed:22:
5e:db:e8:df:b3:6d:ce:f2:c6:a5:37:ba:10:c4:bd:d1:98:7b:
b8:d6:53:22:80:c3:e0:bc:57:2f:2d:74:65:f4:8b:59:1b:cc:
bf:a4:e9:58:05:bf:8e:77:a1:aa:c7:ad:f7:47:6b:35:6e:41:
7c:85:4a:56
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQlId17nW59nJVDdgD1umKdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzNjZDdjMWE5Yzc5YzgyZWVlNWM4NmE0MjNjMTdjMWQ2M2MzNDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4/mdieBppovIdXqQcJly3LU4it9
4PG+SrMqQxpO8I3sXYQpTCPESoBgtm5FsebmPYwuLMidFYW1B+iJrWksBcWygo9s
CbNy7WUTZSso8eJFDqlaPhhN+8vGWmYTL7Q6FnPZ8z7OQlb+frGZfXA54PUQGL+N
RY1g3lulamr+9C5+uFvmaj9OWBGgbDZ/eqN5c1a420IXMKY5rMB9vbECTL1Vs1QI
HEBpM5gxqPAYKdR//7vzTTDAuBKeX5P8OifgA1P0Kkbbf7Rc6LnJkpIH5Q5plura
77Ya3VcV0pyKagUh6OI8sk3D1G4UY4VQbzGuwJp1DvZrVPq+yU4fVAXIhwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFBM818Gpx5yC7uXIakI8F8HWPDQTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzgyYzBh
Mi04MDRiLTQ0NmQtYWIyNC00ZjM4YzY1NmIyNTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvODJjMGEy
LTgwNGItNDQ2ZC1hYjI0LTRmMzhjNjU2YjI1Ni8xL0V6elh3YW5IbklMdTVjaHFR
andYd2RZOE5CTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuQUsMA0EAgACMAcDBQAqAnrAMA0GCSqGSIb3
DQEBCwUAA4IBAQABKTEVQvKerGehfZf0GUo/EI2KAgpYqT/1h8koHVg3EsBl9UWF
3w1eyE5DYaiyDaoO+V6afYaURtEkmHnf1vFFBZExKczWIMXADMjuqeX4GfdD1+JM
pMAYuG0D2BWkpoNvS4wxJqFPQ9HGr1a9QBsu1kS8T74inZm0dMbHBoG4o4hNYRS1
5aj+y3lRuu2ebf3xt2YVrJpGeMh2Hb/Mo2y5yS1iJ9sDdM6W4rw+FzpC6RFWyDDC
MhQGH7Eb5bbOUTPsGBIc7SJe2+jfs23O8salN7oQxL3RmHu41lMigMPgvFcvLXRl
9ItZG8y/pOlYBb+Od6Gqx633R2s1bkF8hUpW
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:34 2025 by rpki-client