![](/console.gif)
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
File: Vf5QzPzvDofMGfgswJK7m3mj468.cer (raw, json)
Hash identifier: tW06E0su4cdxhhE5Spvd3ey3B6jMS7OgaaLEPNvu+2c=
Subject key identifier: 55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0190B18BDFBF145F48B090C6260F9A7D6898
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 14 Jul 2024 14:00:52 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 51098
IP: 194.116.136.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b1:8b:df:bf:14:5f:48:b0:90:c6:26:0f:9a:7d:68:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 14 14:00:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fa:34:4f:23:34:8a:c3:ba:2a:20:27:56:cb:
f5:0b:fe:2d:f4:f3:e4:da:84:1f:7a:a7:74:02:2d:
a2:80:9b:e0:14:b4:5b:52:38:fe:30:5f:bb:05:32:
99:59:1e:61:2a:f0:8f:c8:c3:27:54:75:9d:f2:1b:
5a:49:eb:14:5a:53:8a:ef:3e:21:d3:18:04:cf:3b:
44:88:28:c6:1a:50:5f:16:81:09:d8:1a:f0:81:fa:
97:6c:e9:12:b9:1a:3e:b5:e6:df:80:80:c4:3a:b1:
a3:9f:43:e0:86:b7:5b:4f:f8:b4:85:6d:c2:d9:14:
ea:e4:bb:cb:23:1d:90:3a:6f:70:33:41:0b:ef:24:
4a:e5:cc:53:e3:c2:37:d4:02:50:ed:2d:e1:80:bc:
24:01:f0:50:cb:32:03:d9:62:75:ec:3f:d3:4f:8b:
52:d3:82:15:b1:2c:5e:42:e3:80:81:6e:7f:ec:42:
fa:75:cd:2d:2d:4a:23:03:e1:1e:79:b0:09:74:3d:
8e:bd:7d:d3:45:ec:c9:1d:5c:12:f3:7a:36:a3:8a:
34:08:d7:e0:8a:60:a2:c2:c6:07:9f:c5:e0:f5:a9:
04:93:55:a2:ad:c4:54:46:73:d8:54:da:91:f8:bf:
0d:71:7f:a1:ba:c9:01:de:41:5b:b9:24:8e:df:d2:
f4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.136.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51098
Signature Algorithm: sha256WithRSAEncryption
9c:cc:ed:e0:c9:45:50:97:41:1f:4f:4e:a8:cd:8e:38:8f:1b:
21:f4:9e:4e:55:a8:76:3e:22:e0:fd:5d:c0:1a:4c:53:d9:f7:
ee:a6:73:1e:64:ab:c6:38:70:c2:66:66:b0:46:d8:b7:05:5a:
bb:28:b6:a4:2b:7d:1e:db:f0:cf:e6:c7:ac:a4:0b:9b:c6:63:
c1:09:ff:08:c0:60:b2:5e:90:3e:ec:fb:50:f1:27:36:ee:dd:
b0:50:30:41:65:eb:f1:0c:e5:1e:6a:c0:14:40:de:98:e0:2a:
ef:64:ea:61:97:46:8a:50:21:01:7a:58:07:b9:b5:a8:a1:e7:
ea:88:e6:1e:39:e5:5d:0c:da:e4:f0:98:53:07:7a:36:52:10:
cf:e4:8d:20:d3:88:65:f9:9a:2b:b4:6e:7f:00:44:42:86:e3:
cd:69:79:44:b5:99:d0:c7:50:1d:39:1b:c5:da:c2:58:ad:32:
9a:bf:bb:61:ce:75:c6:3a:c8:e9:b4:2b:fb:73:97:d8:26:22:
bb:eb:25:08:7b:86:91:ec:03:34:48:5a:5b:b1:1e:13:35:44:
02:7a:fc:6c:24:9e:ac:b6:29:f6:ae:f0:99:e5:30:a1:00:e6:
33:a6:84:59:5c:e5:1b:3b:76:5b:c0:19:3e:f0:08:02:10:ca:
03:ae:aa:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 21:13:02 2024 by rpki-client on console-ams.rpki-client.org