Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
File: SSFvXBZbgnp_1z2BB669L2PGPiQ.cer (raw, json)
Hash identifier: TEPzoVJPDJA9lkoKV/nvlCbVnONbuO2My4Gfu/ajrN8=
Subject key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC9ADECAF1A9A3F91434E2EAB8CC00
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48407
IP: 81.90.16.0/20
IP: 93.94.48.0/21
IP: 178.17.48.0/20
IP: 2a00:8b20::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:9a:de:ca:f1:a9:a3:f9:14:34:e2:ea:b8:cc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:59:ab:b2:0a:a0:aa:9f:41:12:2f:b1:03:49:
be:f7:3a:a9:49:28:29:64:aa:96:43:85:f7:ec:cb:
14:1e:21:bd:26:56:fc:4d:24:c0:c1:bc:a8:70:70:
c3:66:5e:2d:d3:89:3c:9c:ca:bf:3e:f4:b1:07:68:
49:17:a3:9e:4d:50:38:e3:34:08:ce:d2:74:3e:54:
e2:7f:0a:2b:c4:5a:49:eb:56:f7:38:09:51:da:f8:
a7:2c:2b:32:5a:2e:ca:cd:a2:c8:f6:40:7b:52:b0:
90:a5:0f:1d:81:30:7b:88:88:52:e5:53:60:f4:d3:
5c:b5:ad:3f:17:02:b1:7b:05:de:65:1b:2c:e3:ee:
98:4d:3c:66:4e:00:c6:27:71:5d:1f:7e:fc:89:37:
81:b7:16:76:e5:79:d4:da:2a:ec:9a:1f:cc:40:48:
de:f3:53:59:42:46:e7:a7:7e:45:e9:0c:b6:88:c7:
3b:c7:fa:ac:94:31:90:58:53:5f:27:87:d8:80:5e:
10:e9:0f:c1:0f:52:f7:ed:06:b0:86:fc:b4:c3:cf:
8c:2d:ef:21:d6:e1:74:34:82:2f:5b:1a:f4:ce:a5:
fc:a9:b8:e9:47:e8:86:c7:5e:26:c8:79:cb:b4:18:
97:d7:22:24:5e:3c:88:3d:ca:84:59:77:d5:30:2c:
d5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.16.0/20
93.94.48.0/21
178.17.48.0/20
IPv6:
2a00:8b20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48407
Signature Algorithm: sha256WithRSAEncryption
42:0b:f3:16:0c:90:50:a5:36:a6:bd:47:1e:3c:69:82:2e:e6:
b2:77:68:39:64:ea:1d:8d:00:1e:a0:8e:38:b9:50:de:27:86:
1b:07:9e:f9:55:00:94:aa:af:56:14:29:79:05:b4:9d:bf:c0:
95:81:20:eb:b0:bd:8a:26:09:5c:c6:0f:43:9c:e1:7d:b9:00:
46:59:6e:f1:5a:69:0e:1e:d0:1e:1c:e6:ed:4c:ca:80:59:05:
d6:0d:17:7b:dd:0c:12:d0:a5:d5:f4:98:89:ee:09:6e:d7:92:
8f:62:44:9e:c9:53:7e:be:fc:a3:e2:34:dd:af:b6:e5:82:b5:
55:7d:ee:68:fb:2c:c0:a9:79:30:ee:dd:c1:ab:e5:9f:5c:ea:
52:00:14:a3:23:da:05:3c:dd:d2:13:08:16:ab:f1:27:5f:a8:
5b:a7:1d:01:ab:9b:3d:27:7f:04:a5:04:51:8c:ee:84:6c:7d:
13:4d:eb:ae:a0:7a:1d:1d:59:4f:15:fb:61:d7:a0:a1:a2:2b:
14:e3:d7:5e:1c:2c:3d:94:84:c1:80:39:67:f2:e5:4b:fc:61:
a1:a5:da:8b:69:8f:a1:6f:d7:5a:a9:36:5a:1f:ea:33:00:44:
e6:aa:ef:46:af:81:60:2f:db:a6:e1:5e:02:3e:7e:51:c7:da:
48:58:3b:ca
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZQl/JreyvGpo/kUNOLquMwAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTIxNmY1YzE2NWI4MjdhN2ZkNzNkODEwN2FlYmQyZjYzYzYzZTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlmrsgqgqp9BEi+xA0m+9zqpSSgp
ZKqWQ4X37MsUHiG9Jlb8TSTAwbyocHDDZl4t04k8nMq/PvSxB2hJF6OeTVA44zQI
ztJ0PlTifworxFpJ61b3OAlR2vinLCsyWi7KzaLI9kB7UrCQpQ8dgTB7iIhS5VNg
9NNcta0/FwKxewXeZRss4+6YTTxmTgDGJ3FdH378iTeBtxZ25XnU2irsmh/MQEje
81NZQkbnp35F6Qy2iMc7x/qslDGQWFNfJ4fYgF4Q6Q/BD1L37Qawhvy0w8+MLe8h
1uF0NIIvWxr0zqX8qbjpR+iGx14myHnLtBiX1yIkXjyIPcqEWXfVMCzVnQIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFEkhb1wWW4J6f9c9gQeuvS9jxj4kMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YyLzQ4NDJh
OS05ZmNkLTRiYjYtYmIwNC0wZGJiYzI0OWU2NTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjIvNDg0MmE5
LTlmY2QtNGJiNi1iYjA0LTBkYmJjMjQ5ZTY1Ny8xL1NTRnZYQlpiZ25wXzF6MkJC
NjY5TDJQR1BpUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQEUVoQAwQDXV4wAwQEshEwMA0EAgACMAcDBQAq
AIsgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC9FzANBgkqhkiG9w0BAQsFAAOC
AQEAQgvzFgyQUKU2pr1HHjxpgi7msndoOWTqHY0AHqCOOLlQ3ieGGwee+VUAlKqv
VhQpeQW0nb/AlYEg67C9iiYJXMYPQ5zhfbkARllu8VppDh7QHhzm7UzKgFkF1g0X
e90MEtCl1fSYie4JbteSj2JEnslTfr78o+I03a+25YK1VX3uaPsswKl5MO7dwavl
n1zqUgAUoyPaBTzd0hMIFqvxJ1+oW6cdAaubPSd/BKUEUYzuhGx9E03rrqB6HR1Z
TxX7YdegoaIrFOPXXhwsPZSEwYA5Z/LlS/xhoaXai2mPoW/XWqk2Wh/qMwBE5qrv
Rq+BYC/bpuFeAj5+UcfaSFg7yg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:57 2025 by rpki-client