Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
File: Gwm9TWooxfH75oPPKs1ei_K65MQ.cer (raw, json)
Hash identifier: lun0SEHe7NyXRCZg1YD22v/DWkDX5RXqihAOvDRrZPM=
Subject key identifier: 1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B48C6B7FB6AF5A90A5D6BE75670B06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:48:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 86.111.248.0/21
IP: 193.7.176.0/21
IP: 2001:678:cac::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:8c:6b:7f:b6:af:5a:90:a5:d6:be:75:67:0b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1b09bd4d6a28c5f1fbe683cf2acd5e8bf2bae4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:2e:31:8f:ac:80:cb:46:48:a8:9c:ea:49:
b0:7c:8f:1e:d5:fe:11:a4:f8:3c:0c:17:a5:72:bf:
d5:37:1e:41:b1:80:a7:98:02:0f:8d:17:30:99:a7:
25:8d:46:6a:b9:d6:54:60:5c:3d:f1:5b:a5:c6:c7:
e8:d3:00:3b:44:8c:70:0d:93:a9:f7:b2:4a:64:bc:
44:45:7e:26:4e:83:bc:a5:4b:5e:b0:b9:76:80:9b:
a8:6b:e2:85:fe:29:cb:f4:f8:8e:a7:f4:10:83:01:
2b:6c:41:ee:f7:f0:94:47:09:c2:bd:e0:a1:e0:44:
75:ba:e8:3e:8c:c0:92:f9:2b:60:2d:9d:f5:e3:81:
d1:ed:9d:0f:58:ac:d6:1d:10:54:76:f6:2e:4d:97:
4e:aa:c2:7c:2c:69:27:9b:82:86:e3:8d:a7:39:ea:
91:91:67:21:f3:8b:1f:15:2f:6b:9b:51:1e:a5:84:
b3:01:80:df:4d:a5:0a:8d:54:fe:34:c1:8c:52:9d:
4b:00:b0:ae:07:45:90:83:1c:7e:f1:ae:20:27:f4:
16:ae:64:c6:87:5e:cb:51:e0:cd:b0:37:7d:99:e7:
57:73:0b:bb:b4:48:3b:af:8e:50:9d:57:8b:2a:0c:
32:fd:df:f0:c6:81:0b:37:d9:ae:3e:f3:e5:4a:38:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.248.0/21
193.7.176.0/21
IPv6:
2001:678:cac::/48
Signature Algorithm: sha256WithRSAEncryption
6b:fe:9c:8e:e5:b9:68:ca:3c:6c:e0:47:af:81:32:10:31:cc:
c1:6b:f9:ea:e9:31:b8:09:30:da:82:60:51:e4:26:33:4a:9b:
c4:3c:04:c5:06:86:46:95:22:dc:87:23:a2:82:58:f2:9e:ba:
0f:17:30:9f:ce:2f:25:3c:bd:22:38:b1:44:81:35:35:9b:95:
95:df:4f:66:e0:c1:ad:8f:a4:77:46:40:96:30:46:e3:a8:c8:
97:9f:2f:77:66:95:05:d0:ca:2d:58:8c:23:5e:84:64:56:66:
8d:09:53:6f:ee:df:4b:fd:23:a4:d5:e6:a4:c6:39:f0:26:39:
b9:be:94:2c:7c:23:86:b2:14:72:8a:84:7c:45:6a:5a:6b:1c:
75:98:0e:31:2d:27:7d:fd:4b:95:6b:d2:be:2d:93:bd:67:8e:
37:e6:59:1b:c5:a2:23:bb:77:eb:4f:2b:f2:b1:b9:4e:30:09:
08:e0:8e:16:fa:61:89:1f:67:eb:10:d8:5f:72:5f:f0:a9:a5:
47:3e:de:ad:82:3a:f3:2d:1b:72:99:e0:e8:23:20:4f:4f:ef:
ba:fe:7c:cc:b2:9c:b2:4f:58:a3:9a:8c:28:d2:ac:c5:7f:d8:
45:7a:d0:df:82:2e:ce:66:d8:bd:05:1b:79:49:f1:5c:45:36:
ae:d6:9f:35
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZQntIxrf7avWpCl1r51ZwsGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjA5YmQ0ZDZhMjhjNWYxZmJlNjgzY2YyYWNkNWU4YmYyYmFlNGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGYuMY+sgMtGSKic6kmwfI8e1f4R
pPg8DBelcr/VNx5BsYCnmAIPjRcwmacljUZqudZUYFw98Vulxsfo0wA7RIxwDZOp
97JKZLxERX4mToO8pUtesLl2gJuoa+KF/inL9PiOp/QQgwErbEHu9/CURwnCveCh
4ER1uug+jMCS+StgLZ3144HR7Z0PWKzWHRBUdvYuTZdOqsJ8LGknm4KG442nOeqR
kWch84sfFS9rm1EepYSzAYDfTaUKjVT+NMGMUp1LALCuB0WQgxx+8a4gJ/QWrmTG
h17LUeDNsDd9medXcwu7tEg7r45QnVeLKgwy/d/wxoELN9muPvPlSji3bwIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFBsJvU1qKMXx++aDzyrNXovyuuTEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlhLzg2YjU0
Yy1iOTgwLTQ4MTctOGRmNi1kY2U3NzgxYTJjNWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWEvODZiNTRj
LWI5ODAtNDgxNy04ZGY2LWRjZTc3ODFhMmM1Yy8xL0d3bTlUV29veGZINzVvUFBL
czFlaV9LNjVNUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDYGCCsGAQUF
BwEHAQH/BCcwJTASBAIAATAMAwQDVm/4AwQDwQewMA8EAgACMAkDBwAgAQZ4DKww
DQYJKoZIhvcNAQELBQADggEBAGv+nI7luWjKPGzgR6+BMhAxzMFr+erpMbgJMNqC
YFHkJjNKm8Q8BMUGhkaVItyHI6KCWPKeug8XMJ/OLyU8vSI4sUSBNTWblZXfT2bg
wa2PpHdGQJYwRuOoyJefL3dmlQXQyi1YjCNehGRWZo0JU2/u30v9I6TV5qTGOfAm
Obm+lCx8I4ayFHKKhHxFalprHHWYDjEtJ339S5Vr0r4tk71njjfmWRvFoiO7d+tP
K/KxuU4wCQjgjhb6YYkfZ+sQ2F9yX/CppUc+3q2COvMtG3KZ4OgjIE9P77r+fMyy
nLJPWKOajCjSrMV/2EV60N+CLs5m2L0FG3lJ8VxFNq7WnzU=
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:10:25 2025 by rpki-client