Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
File: V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer (raw, json)
Hash identifier: Sz7JURsgWhMJZOtu4+K8W4bshpLpkK6n1TwIdmV3V7o=
Subject key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E3E9D77A70AC4BBC66726179BE113
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199554
IP: 5.57.200.0/21
IP: 185.164.152.0/22
IP: 2a01:4540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:3e:9d:77:a7:0a:c4:bb:c6:67:26:17:9b:e1:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=578d854bd2bee242a82fb83922d149bccf19ed02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:14:21:0d:f2:ae:45:90:55:88:ea:1b:d6:29:
b2:77:6c:44:91:34:b2:9c:3e:84:c4:cf:3e:b6:a3:
25:5f:09:98:3b:2a:ef:bf:a9:dd:92:61:f0:a0:4b:
6d:4c:fa:ac:02:da:fc:d7:64:ab:9d:44:11:88:68:
6f:fb:a4:7e:b7:02:2b:29:a3:20:ec:5f:50:93:17:
ea:83:89:ed:57:09:a0:1a:90:61:33:15:de:d1:b8:
48:d2:19:19:a6:57:cc:5c:fb:fa:95:1f:0e:9d:0e:
c9:c8:84:b1:2d:09:2e:18:28:f0:36:4d:7c:dc:48:
05:d2:de:49:f5:7c:c5:49:39:38:31:7b:ce:c6:57:
8e:65:db:69:05:e5:2f:a3:94:7b:85:92:da:9d:31:
4f:3b:ff:d8:b3:3a:7f:53:0a:81:3d:df:c9:ee:f3:
08:46:e2:89:41:20:19:7e:c9:31:d0:28:28:cc:de:
2c:47:34:4e:22:34:57:5d:04:be:91:78:d2:ab:fb:
6c:e5:49:12:7e:fe:47:56:e9:8e:7a:f0:75:8c:bf:
4f:96:9b:92:b1:6a:15:ea:8c:9d:d0:eb:ef:d8:61:
08:24:bb:32:45:17:76:06:e1:f7:a5:72:1c:f6:66:
4d:2c:8c:4c:3d:9e:a3:39:14:32:4b:97:ae:56:27:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.200.0/21
185.164.152.0/22
IPv6:
2a01:4540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199554
Signature Algorithm: sha256WithRSAEncryption
66:9c:2f:89:dd:34:9d:61:ab:c4:64:9f:7c:1b:ac:38:df:a0:
7b:09:2a:56:1d:79:7a:a5:5d:ba:d2:e1:f1:9b:bf:3a:56:27:
04:40:59:b2:12:df:74:a9:c8:7f:e8:96:e8:75:bc:86:79:43:
4c:e7:84:69:c1:3d:4e:e5:64:fa:ef:7f:ee:81:e9:ae:0b:3c:
66:ab:28:b9:ba:32:cb:67:07:e7:ba:19:8d:c9:84:3d:5f:28:
99:65:48:c3:3d:c2:dc:d3:fd:37:a8:44:f0:84:84:a5:7e:fc:
dc:dc:32:15:6e:0b:e4:e7:39:f7:dd:ca:92:9d:ba:87:17:53:
62:a8:f4:50:e1:50:06:74:79:9e:63:76:b3:bc:00:a6:2a:70:
5b:e4:17:ab:14:e9:b6:ef:47:9f:44:27:8d:5e:6f:f8:c8:9c:
cf:c2:57:19:53:f3:b3:49:11:1b:cc:92:5b:e6:54:14:f1:1d:
2f:ae:81:68:8c:f8:eb:23:51:96:5f:eb:3f:eb:27:6f:53:61:
9d:60:74:c1:ca:1a:20:df:a6:78:bb:c1:cb:e1:d1:f3:3c:6a:
b1:c6:0a:58:12:cc:84:fa:91:0f:e8:86:b2:6a:0b:cc:62:8d:
5c:db:ef:4b:03:bf:93:d5:05:f6:35:57:ae:ab:1c:6c:d1:13:
bd:53:17:f1
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQijj6dd6cKxLvGZyYXm+ETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzhkODU0YmQyYmVlMjQyYTgyZmI4MzkyMmQxNDliY2NmMTllZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxQhDfKuRZBViOob1imyd2xEkTSy
nD6ExM8+tqMlXwmYOyrvv6ndkmHwoEttTPqsAtr812SrnUQRiGhv+6R+twIrKaMg
7F9Qkxfqg4ntVwmgGpBhMxXe0bhI0hkZplfMXPv6lR8OnQ7JyISxLQkuGCjwNk18
3EgF0t5J9XzFSTk4MXvOxleOZdtpBeUvo5R7hZLanTFPO//Yszp/UwqBPd/J7vMI
RuKJQSAZfskx0CgozN4sRzROIjRXXQS+kXjSq/ts5UkSfv5HVumOevB1jL9PlpuS
sWoV6oyd0Ovv2GEIJLsyRRd2BuH3pXIc9mZNLIxMPZ6jORQyS5euViet5QIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFFeNhUvSvuJCqC+4OSLRSbzPGe0CMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ExLzEyOGJj
Ni1mNmZmLTRjOTAtOGI1YS0xYWI1ZjUzOTlkM2EvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTEvMTI4YmM2
LWY2ZmYtNGM5MC04YjVhLTFhYjVmNTM5OWQzYS8xL1Y0MkZTOUstNGtLb0w3ZzVJ
dEZKdk04WjdRSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDBTnIAwQCuaSYMA0EAgACMAcDBQMqAUVAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwMLgjANBgkqhkiG9w0BAQsFAAOCAQEAZpwv
id00nWGrxGSffBusON+gewkqVh15eqVdutLh8Zu/OlYnBEBZshLfdKnIf+iW6HW8
hnlDTOeEacE9TuVk+u9/7oHprgs8Zqsouboyy2cH57oZjcmEPV8omWVIwz3C3NP9
N6hE8ISEpX783NwyFW4L5Oc5993Kkp26hxdTYqj0UOFQBnR5nmN2s7wApipwW+QX
qxTptu9Hn0QnjV5v+Micz8JXGVPzs0kRG8ySW+ZUFPEdL66BaIz46yNRll/rP+sn
b1NhnWB0wcoaIN+meLvBy+HR8zxqscYKWBLMhPqRD+iGsmoLzGKNXNvvSwO/k9UF
9jVXrqscbNETvVMX8Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:43 2025 by rpki-client