Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer
File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer (raw, json)
Hash identifier: 9vZpOXEWdOxyySlp5s0yOHIGG2pbb8+JDZ62z2oEr4k=
Subject key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274829B2F2A92248E3F12E7748183310
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 28738
IP: 78.153.128.0 -- 78.153.136.255
IP: 78.153.139.0 -- 78.153.146.255
IP: 78.153.148.0 -- 78.153.159.255
IP: 109.237.96.0/21
IP: 109.237.105.0 -- 109.237.111.255
IP: 2a01:adc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:29:b2:f2:a9:22:48:e3:f1:2e:77:48:18:33:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=22a44566764ebb511683cb6228fa91997b559379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f7:36:3b:af:a9:14:c3:80:2b:65:d1:0c:78:
c1:2c:5a:2b:4e:8f:8e:be:92:27:62:e1:e6:2e:77:
a2:fd:bd:68:3b:e1:4d:ee:51:83:3f:ee:91:be:f9:
27:04:3b:63:fa:c1:66:82:1b:fe:49:ab:02:b9:a8:
01:82:c4:1a:0e:21:09:5a:06:3a:b9:91:d2:ba:93:
10:82:4e:36:e3:5e:e1:8f:cc:20:2d:fb:7f:99:c8:
72:50:4f:f9:b2:36:dd:0c:23:dc:63:9f:22:c1:07:
89:75:f3:5d:97:be:86:d3:e1:5b:fc:1d:c2:47:99:
9e:71:ff:24:4c:24:0d:f2:1b:60:e7:7d:90:26:a9:
ab:02:04:ce:28:20:ae:9f:d1:ce:34:1a:ce:8e:71:
72:3d:a4:c9:a4:1e:4b:9a:af:39:1e:a0:d4:89:ee:
47:e7:11:cf:c3:ec:ee:b4:29:be:13:d7:14:e8:01:
22:84:8b:dd:bf:51:b2:ef:95:2f:27:64:f0:14:04:
e2:84:d7:4f:72:6f:75:eb:3e:76:6d:d1:2c:4d:8d:
e9:04:49:a8:3b:56:5f:99:47:6e:cb:99:0d:58:74:
68:9f:fe:73:42:23:61:43:46:65:b3:94:3d:28:1a:
fc:1b:af:4c:f1:6c:eb:a3:9d:cd:63:4d:30:b0:2c:
c5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.128.0-78.153.136.255
78.153.139.0-78.153.146.255
78.153.148.0-78.153.159.255
109.237.96.0/21
109.237.105.0-109.237.111.255
IPv6:
2a01:adc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28738
Signature Algorithm: sha256WithRSAEncryption
a7:e1:a0:50:b3:3d:66:2f:d0:51:3d:33:47:dc:98:8d:7c:ba:
95:ac:a0:3c:ba:73:d9:a2:4e:1c:d8:e0:56:09:7c:62:f4:50:
a3:3e:0a:65:a2:5d:e1:99:8d:85:02:53:2a:ba:2d:d9:96:2c:
c8:02:40:8a:78:f6:c4:60:34:98:9e:a7:e1:1b:85:4d:0a:85:
3b:7f:72:f8:0f:43:d8:2f:af:14:4c:2f:f1:ed:92:1f:c2:c2:
bc:00:a4:6e:49:26:48:46:a8:d7:53:af:8d:fc:1d:c4:b6:0c:
f5:a7:32:f5:18:97:6e:ef:00:7c:8f:d7:42:33:b2:a4:00:83:
e1:cd:09:fa:33:11:51:0e:00:4f:68:47:35:73:8b:f4:2b:7d:
70:67:9a:53:3f:9b:5c:0b:ca:da:db:c3:70:ca:2f:87:18:1d:
ee:1c:1b:2b:64:a0:c9:f4:29:b2:a1:ae:2e:30:d1:01:9e:c0:
47:02:75:a8:0f:1e:2f:89:a3:83:da:c5:77:98:fb:6f:89:1a:
39:f0:be:ec:5a:4c:4b:58:3a:2f:92:08:f0:ec:0b:75:bb:0a:
46:59:55:68:cc:fb:0d:4e:89:f0:65:bf:89:72:ac:d1:d0:2c:
a4:7c:c5:9d:24:51:a9:86:36:75:74:96:6a:2c:87:87:49:b7:
a2:1a:2d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:53:19 2025 by rpki-client