Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IeQhptlumdY_fPtJnKcRfIIwTqo.cer
File: IeQhptlumdY_fPtJnKcRfIIwTqo.cer (raw, json)
Hash identifier: EeY7VLkztYv44H2lSWd3m32PmpbE3lmjr6QHklKBf68=
Subject key identifier: 21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D971CDB0DCE0D42EDE59E98E63FE5F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210178
IP: 194.61.140.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:71:cd:b0:dc:e0:d4:2e:de:59:e9:8e:63:fe:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21e421a6d96e99d63f7cfb499ca7117c82304eaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f0:53:96:99:be:89:3e:ad:69:20:1f:41:88:
b0:b3:53:02:1e:ab:eb:67:9f:71:e0:9c:19:8a:bc:
e6:90:5c:3c:ef:ab:10:15:96:99:3b:07:63:7b:69:
e5:49:35:8e:8f:11:ae:91:c7:bf:a9:92:ff:4d:49:
ea:ec:bd:61:14:0e:80:60:c3:97:46:4f:7d:f6:3c:
a3:78:8b:02:e7:94:48:99:4f:85:a2:19:44:06:85:
ba:f7:e0:6e:e3:9b:45:77:5a:b4:ca:76:54:e8:f5:
e2:60:8a:3f:16:74:10:82:02:75:d2:b0:05:0f:e4:
cf:ca:ae:77:95:b9:8c:27:74:87:a9:1b:ea:a3:83:
38:e8:99:54:58:04:d4:41:d3:77:f3:0e:6f:08:d6:
30:7b:ab:43:1e:75:17:9e:a3:38:34:62:5a:93:2f:
d7:96:28:a9:32:11:d0:e2:30:38:4b:da:83:1a:67:
04:cc:3d:c1:60:84:35:33:f9:bf:5d:e6:26:90:88:
a9:1f:86:ef:e0:41:ba:fc:52:a5:63:a5:b9:af:be:
00:7c:0b:b2:dd:1d:e8:1b:2c:67:bd:f3:25:eb:a4:
5f:cb:50:a4:54:86:3e:89:75:fb:59:5b:be:59:1b:
d7:cf:15:67:1a:90:50:bf:d9:4e:95:fa:b5:fb:53:
08:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E4:21:A6:D9:6E:99:D6:3F:7C:FB:49:9C:A7:11:7C:82:30:4E:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1d4b2c-945d-4f39-b233-3e6b7025b65e/1/IeQhptlumdY_fPtJnKcRfIIwTqo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.140.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210178
Signature Algorithm: sha256WithRSAEncryption
2f:ec:ed:7e:48:46:cf:0c:ea:45:20:4e:ba:89:5e:54:7c:2f:
2a:af:e6:c2:53:2d:7a:de:e7:c6:3b:9d:1e:a9:95:c0:e8:df:
3a:ee:53:a9:42:13:64:32:88:98:64:8e:63:c0:cc:ae:72:84:
18:9c:a6:0b:eb:0f:9f:27:14:dc:f5:ad:a4:ba:c6:6e:e5:e3:
dd:c1:cb:2b:ec:2f:77:7b:88:e0:b4:11:21:8b:85:d4:f1:e2:
c9:61:ee:96:72:e7:42:98:ce:e6:fc:34:8f:28:95:09:b2:76:
d0:5d:df:62:50:76:88:59:b2:b9:c3:4c:6f:eb:a7:78:04:88:
00:da:ac:12:04:3d:6d:fe:05:f9:61:64:a8:1c:8f:02:80:55:
dd:3d:2c:6f:cd:cc:59:0c:3a:c2:a1:62:eb:aa:1e:1c:b8:01:
89:9e:b8:22:f4:de:c6:61:0a:e9:f0:48:56:58:f3:c2:f2:a6:
e2:49:f5:6c:4a:79:c6:f4:f8:6c:43:37:e9:0d:ee:f8:78:50:
3f:8b:a9:9c:88:45:37:91:69:ac:33:1d:d2:fe:cb:4e:43:2d:
8c:70:82:6c:68:a2:63:12:9c:f4:bc:15:90:a6:e4:67:0b:4f:
19:7e:75:1a:77:c3:95:e3:ec:37:28:08:09:75:75:e2:66:d0:
d6:df:09:a2
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQm2XHNsNzg1C7eWemOY/5fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWU0MjFhNmQ5NmU5OWQ2M2Y3Y2ZiNDk5Y2E3MTE3YzgyMzA0ZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/BTlpm+iT6taSAfQYiws1MCHqvr
Z59x4JwZirzmkFw876sQFZaZOwdje2nlSTWOjxGukce/qZL/TUnq7L1hFA6AYMOX
Rk999jyjeIsC55RImU+FohlEBoW69+Bu45tFd1q0ynZU6PXiYIo/FnQQggJ10rAF
D+TPyq53lbmMJ3SHqRvqo4M46JlUWATUQdN38w5vCNYwe6tDHnUXnqM4NGJaky/X
liipMhHQ4jA4S9qDGmcEzD3BYIQ1M/m/XeYmkIipH4bv4EG6/FKlY6W5r74AfAuy
3R3oGyxnvfMl66Rfy1CkVIY+iXX7WVu+WRvXzxVnGpBQv9lOlfq1+1MIpwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFCHkIabZbpnWP3z7SZynEXyCME6qMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc3LzFkNGIy
Yy05NDVkLTRmMzktYjIzMy0zZTZiNzAyNWI2NWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzcvMWQ0YjJj
LTk0NWQtNGYzOS1iMjMzLTNlNmI3MDI1YjY1ZS8xL0llUWhwdGx1bWRZX2ZQdEpu
S2NSZklJd1Rxby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwj2MMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwM1AjANBgkqhkiG9w0BAQsFAAOCAQEAL+ztfkhGzwzqRSBOuoleVHwvKq/mwlMt
et7nxjudHqmVwOjfOu5TqUITZDKImGSOY8DMrnKEGJymC+sPnycU3PWtpLrGbuXj
3cHLK+wvd3uI4LQRIYuF1PHiyWHulnLnQpjO5vw0jyiVCbJ20F3fYlB2iFmyucNM
b+uneASIANqsEgQ9bf4F+WFkqByPAoBV3T0sb83MWQw6wqFi66oeHLgBiZ64IvTe
xmEK6fBIVljzwvKm4kn1bEp5xvT4bEM36Q3u+HhQP4upnIhFN5FprDMd0v7LTkMt
jHCCbGiiYxKc9LwVkKbkZwtPGX51GnfDlePsNygICXV14mbQ1t8Jog==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:02:02 2025 by rpki-client