Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
File: UbSboN2GFRKGGNUBWcsPO16e5iY.cer (raw, json)
Hash identifier: n5NaXBl0qhu9nPAg0z4skLPRqY8p5uH6isf1gcSgjy0=
Subject key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6D9187D3DBBA74A33438D445C91BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 81.188.0.0/16
IP: 212.100.160.0/19
IP: 213.193.128.0/18
IP: 2a00:80c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d9:18:7d:3d:bb:a7:4a:33:43:8d:44:5c:91:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:84:22:32:96:4c:06:e7:cf:3f:06:e0:41:e7:
71:d3:f0:74:58:49:52:44:54:45:8d:4d:3f:23:f0:
9f:8c:9b:6a:7e:b8:bd:e1:b4:a3:30:d3:10:69:a5:
5b:1b:29:11:95:40:cd:ae:fc:d5:67:9b:44:3a:63:
22:fc:cd:78:14:a7:4d:d7:c8:bf:2d:31:6c:45:62:
c6:88:4a:e6:f1:6f:d6:a9:da:ed:ed:26:f5:51:56:
21:76:a1:15:f8:ca:e4:a1:6c:e5:45:1f:f4:69:4b:
b6:e0:13:02:07:2f:6c:eb:66:87:d5:f0:73:86:4b:
ad:d2:7f:1f:1f:e1:12:fd:73:3f:3b:36:ad:4c:8d:
92:d2:e5:5e:c6:83:bc:af:1c:b0:1c:73:35:65:b8:
ab:a1:20:94:ae:a0:3f:c0:2d:e7:b4:f0:a3:23:ab:
47:b6:19:5e:12:4b:b5:a2:60:cb:5f:95:07:4a:88:
df:22:d9:81:a1:39:a9:b1:de:b1:bf:79:93:2d:35:
ec:9e:dd:26:e8:a5:d0:75:d6:4d:e2:b4:ad:e3:63:
ac:68:eb:67:24:09:3a:97:17:ee:29:56:d4:77:c2:
7d:c3:18:6b:05:e4:a5:5c:aa:fa:c0:9c:4d:02:c3:
bc:91:4a:cc:e7:24:a4:6c:bc:3a:32:c9:62:7b:0f:
48:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.188.0.0/16
212.100.160.0/19
213.193.128.0/18
IPv6:
2a00:80c0::/32
Signature Algorithm: sha256WithRSAEncryption
9c:dc:7d:b9:11:9b:f4:b8:c3:7a:f8:46:b2:31:e7:4c:13:69:
20:0a:bf:5f:6a:b9:ed:a8:24:2f:26:07:15:e1:17:71:fb:c6:
06:00:e1:5e:53:77:be:8a:3d:68:8d:02:d2:3b:c6:9f:0d:22:
83:bb:a7:97:49:47:fa:af:7d:f3:a0:3b:12:12:aa:95:c5:49:
45:62:38:e9:59:1f:e5:b0:b3:e3:75:b9:10:d0:2c:f9:a2:0c:
2b:69:5c:ac:4c:99:37:5a:17:4e:74:96:2b:db:21:23:fd:38:
32:09:6b:7d:37:ca:c9:5e:24:ab:09:4a:1d:59:18:81:46:5b:
b3:b6:0d:b7:9b:9d:f7:6a:59:77:eb:87:1d:e1:17:1b:24:ef:
a2:d1:32:7b:14:72:4d:61:ad:05:38:cd:92:5d:5a:af:1e:55:
8d:a4:49:29:17:8c:97:bf:70:a2:76:00:a9:3a:6c:a3:f3:85:
37:58:2d:d9:fe:0a:d5:8d:62:60:01:bd:ba:3d:ee:14:b5:c9:
f9:91:96:25:66:12:27:70:d0:12:29:5c:b0:5d:25:72:38:8f:
41:6c:6f:f3:62:32:88:a5:a1:4e:71:47:59:3a:cc:66:02:b6:
62:09:e8:2f:2c:0a:54:c1:13:33:bc:b2:e5:ab:dc:5a:9b:73:
bf:cd:30:c1
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAZQj1tkYfT27p0ozQ41EXJG/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWI0OWJhMGRkODYxNTEyODYxOGQ1MDE1OWNiMGYzYjVlOWVlNjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4QiMpZMBufPPwbgQedx0/B0WElS
RFRFjU0/I/CfjJtqfri94bSjMNMQaaVbGykRlUDNrvzVZ5tEOmMi/M14FKdN18i/
LTFsRWLGiErm8W/Wqdrt7Sb1UVYhdqEV+MrkoWzlRR/0aUu24BMCBy9s62aH1fBz
hkut0n8fH+ES/XM/OzatTI2S0uVexoO8rxywHHM1ZbiroSCUrqA/wC3ntPCjI6tH
thleEku1omDLX5UHSojfItmBoTmpsd6xv3mTLTXsnt0m6KXQddZN4rSt42OsaOtn
JAk6lxfuKVbUd8J9wxhrBeSlXKr6wJxNAsO8kUrM5ySkbLw6Msliew9I8QIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFFG0m6DdhhUShhjVAVnLDztenuYmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdhLzI2YzA0
OS00N2VlLTQ4ODYtOTg0NC00YWI5ZThhYTMyNjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvN2EvMjZjMDQ5
LTQ3ZWUtNDg4Ni05ODQ0LTRhYjllOGFhMzI2Mi8xL1ViU2JvTjJHRlJLR0dOVUJX
Y3NQTzE2ZTVpWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDkGCCsGAQUF
BwEHAQH/BCowKDAXBAIAATARAwMAUbwDBAXUZKADBAbVwYAwDQQCAAIwBwMFACoA
gMAwDQYJKoZIhvcNAQELBQADggEBAJzcfbkRm/S4w3r4RrIx50wTaSAKv19que2o
JC8mBxXhF3H7xgYA4V5Td76KPWiNAtI7xp8NIoO7p5dJR/qvffOgOxISqpXFSUVi
OOlZH+Wws+N1uRDQLPmiDCtpXKxMmTdaF050livbISP9ODIJa303ysleJKsJSh1Z
GIFGW7O2DbebnfdqWXfrhx3hFxsk76LRMnsUck1hrQU4zZJdWq8eVY2kSSkXjJe/
cKJ2AKk6bKPzhTdYLdn+CtWNYmABvbo97hS1yfmRliVmEidw0BIpXLBdJXI4j0Fs
b/NiMoiloU5xR1k6zGYCtmIJ6C8sClTBEzO8suWr3Fqbc7/NMME=
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:25:46 2025 by rpki-client