Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YM7rJThFxtyhkNNhbboj832LY5c.cer
File: YM7rJThFxtyhkNNhbboj832LY5c.cer (raw, json)
Hash identifier: 6uHbaBq7RBUaiYvae1toPD5rUBFWnTXxN9Yy9aSwwlY=
Subject key identifier: 60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942068543A5D4BCE37D527C5F3FFC1BF53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.213.227.0/24
IP: 185.38.64.0/22
IP: 2001:67c:1128::/48
IP: 2a04:7640::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:54:3a:5d:4b:ce:37:d5:27:c5:f3:ff:c1:bf:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60ceeb253845c6dca190d3616dba23f37d8b6397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:33:b7:27:cc:35:68:c1:55:e3:13:8c:9c:42:
05:e5:be:69:85:a6:43:92:aa:60:9e:7b:b1:8f:40:
2b:c1:84:56:46:72:76:4f:51:5d:87:64:f1:19:f4:
94:a1:2f:21:0c:81:31:f1:54:ed:1a:51:36:f9:08:
57:96:69:f8:56:15:3f:ba:43:0e:6b:50:c1:39:c0:
72:71:5e:2c:80:5d:8e:5d:0f:eb:f4:e7:7f:93:80:
6e:c5:bd:d0:1b:4c:3b:8f:9e:ad:ff:8f:23:fa:c7:
f2:f1:46:90:f8:2c:09:f1:62:d9:ae:1d:d9:2b:2a:
7e:4a:aa:eb:81:f4:0c:ff:85:1b:26:cf:a2:91:02:
a1:56:75:f3:a3:4d:16:2d:65:07:06:95:a7:ee:95:
5f:3a:a5:81:27:27:e2:6b:70:78:67:47:24:f5:e4:
9d:53:98:90:9c:0f:dc:e1:11:69:7e:e5:28:31:7b:
77:64:88:27:22:4a:dc:12:4c:85:f4:37:a2:f3:65:
52:40:79:d2:79:4e:a7:a5:7d:cf:b4:a3:ec:9c:4a:
cc:26:8f:0f:bc:07:01:f7:24:12:8f:5a:00:a9:e9:
d6:f7:1d:19:94:44:0a:6b:e9:ea:0b:ee:69:d4:45:
79:38:9d:29:c4:e7:51:13:f6:96:54:9b:b2:ca:ed:
d0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CE:EB:25:38:45:C6:DC:A1:90:D3:61:6D:BA:23:F3:7D:8B:63:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/261514-a15d-4661-9c55-9f9322d6732b/1/YM7rJThFxtyhkNNhbboj832LY5c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.227.0/24
185.38.64.0/22
IPv6:
2001:67c:1128::/48
2a04:7640::/29
Signature Algorithm: sha256WithRSAEncryption
35:23:4e:50:9d:f1:a3:f9:18:4f:8c:29:5e:f8:19:67:8a:24:
f7:24:c4:24:8b:98:cc:8d:62:0b:39:a8:ec:35:dd:bf:dc:f2:
30:0e:2f:10:b2:a4:fd:d7:aa:f7:48:02:98:fe:5c:14:21:28:
87:27:df:46:21:b8:fb:bc:d6:77:24:db:fe:52:6a:af:bd:fe:
62:3f:54:4a:ad:32:3b:60:29:33:28:a7:41:81:ce:73:90:5c:
bc:47:8e:9f:f3:92:f1:a8:ed:3e:1d:6b:15:b5:e8:74:3c:43:
e2:8e:14:e1:6f:46:77:77:ad:55:91:a7:90:f8:78:b4:1c:61:
84:b0:2a:33:a7:90:bf:f5:3f:1a:33:bb:9e:ac:b6:57:74:6d:
34:13:4b:7b:5c:34:aa:e2:eb:f1:5e:43:9e:2e:24:5f:ab:e3:
d6:39:93:4d:43:1c:c9:5d:34:5a:4b:2a:b3:53:6c:52:71:5e:
cb:37:cd:d1:76:22:68:a4:b9:b3:7b:7a:35:0a:bc:1c:11:bf:
cf:0f:57:a6:2e:08:35:dc:12:10:81:43:a8:3c:d2:73:01:18:
4d:31:51:f8:1a:6a:80:88:56:eb:78:89:e5:35:85:39:1f:60:
13:72:62:f4:76:18:b1:d6:53:9f:80:dd:49:e4:73:9c:7d:c6:
07:3a:d4:c9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgISAZQgaFQ6XUvON9UnxfP/wb9TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGNlZWIyNTM4NDVjNmRjYTE5MGQzNjE2ZGJhMjNmMzdkOGI2Mzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjO3J8w1aMFV4xOMnEIF5b5phaZD
kqpgnnuxj0ArwYRWRnJ2T1Fdh2TxGfSUoS8hDIEx8VTtGlE2+QhXlmn4VhU/ukMO
a1DBOcBycV4sgF2OXQ/r9Od/k4Buxb3QG0w7j56t/48j+sfy8UaQ+CwJ8WLZrh3Z
Kyp+SqrrgfQM/4UbJs+ikQKhVnXzo00WLWUHBpWn7pVfOqWBJyfia3B4Z0ck9eSd
U5iQnA/c4RFpfuUoMXt3ZIgnIkrcEkyF9Dei82VSQHnSeU6npX3PtKPsnErMJo8P
vAcB9yQSj1oAqenW9x0ZlEQKa+nqC+5p1EV5OJ0pxOdRE/aWVJuyyu3QRQIDAQAB
o4ICojCCAp4wHQYDVR0OBBYEFGDO6yU4RcbcoZDTYW26I/N9i2OXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UyLzI2MTUx
NC1hMTVkLTQ2NjEtOWM1NS05ZjkzMjJkNjczMmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTIvMjYxNTE0
LWExNWQtNDY2MS05YzU1LTlmOTMyMmQ2NzMyYi8xL1lNN3JKVGhGeHR5aGtOTmhi
Ym9qODMyTFk1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMD0GCCsGAQUF
BwEHAQH/BC4wLDASBAIAATAMAwQAW9XjAwQCuSZAMBYEAgACMBADBwAgAQZ8ESgD
BQMqBHZAMA0GCSqGSIb3DQEBCwUAA4IBAQA1I05QnfGj+RhPjCle+BlniiT3JMQk
i5jMjWILOajsNd2/3PIwDi8QsqT916r3SAKY/lwUISiHJ99GIbj7vNZ3JNv+Umqv
vf5iP1RKrTI7YCkzKKdBgc5zkFy8R46f85LxqO0+HWsVteh0PEPijhThb0Z3d61V
kaeQ+Hi0HGGEsCozp5C/9T8aM7uerLZXdG00E0t7XDSq4uvxXkOeLiRfq+PWOZNN
QxzJXTRaSyqzU2xScV7LN83RdiJopLmze3o1CrwcEb/PD1emLgg13BIQgUOoPNJz
ARhNMVH4GmqAiFbreInlNYU5H2ATcmL0dhix1lOfgN1J5HOcfcYHOtTJ
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:09:56 2025 by rpki-client