Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8kubfMbNUWhlv4DW8taJTBqf1Q.cer
File: e8kubfMbNUWhlv4DW8taJTBqf1Q.cer (raw, json)
Hash identifier: vkjPg3fGgmuTK7hOgD8Rgux0i5rxcUP2KkLvs0ScNGc=
Subject key identifier: 7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444DB71B1AD296299B81CFA6B7A4A23
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212825
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:db:71:b1:ad:29:62:99:b8:1c:fa:6b:7a:4a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bc92e6df31b3545a196fe035bcb5a25306a7f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:bc:ee:44:de:61:6d:9b:7d:48:3c:cc:40:
df:f2:86:bd:88:b6:13:1a:ab:10:fe:e8:d7:c9:7c:
97:38:8f:47:d7:70:f9:05:e5:4b:ec:dd:59:ab:ad:
67:06:cb:a9:2c:3b:65:4c:02:4c:9d:a6:e3:ca:7c:
ec:44:c1:e8:4e:d9:36:c0:e7:c0:5e:1d:13:f0:13:
1f:7c:ad:41:55:fd:e3:7b:fd:04:5d:8e:55:ca:de:
f7:4d:2c:90:ab:37:22:32:87:59:1b:f8:33:4e:4f:
4b:df:4f:36:a2:95:d3:69:56:e6:fb:9d:cf:9c:4e:
6b:25:de:5d:ae:0f:ec:1c:a3:9d:17:d8:16:fc:03:
10:d9:4e:c4:e6:5e:b7:c0:8c:aa:80:65:da:0c:a8:
22:0f:d9:2c:f7:f1:0a:ac:7e:b1:89:71:c5:4f:0b:
07:96:34:1d:16:2e:60:80:b1:9c:ca:3e:96:10:8b:
b5:a9:4f:39:38:a5:d9:d6:11:c9:72:f9:0e:09:64:
e6:0e:ae:0c:5e:4c:0b:dd:55:6c:05:a8:11:ff:d4:
f9:e2:73:98:47:92:06:7a:f0:76:11:8c:c1:eb:47:
52:c8:06:4f:61:b7:cd:02:63:7a:b7:dd:97:31:3f:
73:0d:95:d8:d7:61:6a:df:c0:a4:48:26:eb:fe:fb:
75:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C9:2E:6D:F3:1B:35:45:A1:96:FE:03:5B:CB:5A:25:30:6A:7F:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/c190b1-562f-45b1-9a07-4bdb58812086/1/e8kubfMbNUWhlv4DW8taJTBqf1Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212825
Signature Algorithm: sha256WithRSAEncryption
60:63:a9:bd:a2:fd:4b:88:64:19:30:94:42:66:ee:d0:36:f7:
71:2c:77:8d:38:02:35:a2:6d:66:74:d3:ef:22:3c:ef:89:9d:
2a:32:79:39:db:73:d6:cf:68:2d:a4:2f:6d:17:33:37:66:75:
7c:4e:14:a8:12:f9:03:63:0c:77:65:a3:e7:fc:51:3b:44:19:
17:5e:36:1c:52:a7:da:78:00:60:9c:34:fb:77:6e:8a:93:eb:
5b:7d:d3:9d:1e:b8:79:96:a0:8b:c4:b9:7b:8d:6a:c1:d9:96:
e9:2f:d7:ff:36:37:8f:2b:6e:cc:dc:7e:af:1b:42:27:bb:a1:
73:42:a1:cc:a8:f2:b4:09:6f:80:c9:87:f3:04:39:3b:db:11:
ea:9d:6f:cc:d4:db:32:79:56:47:e5:5d:6c:30:b9:ed:3c:82:
2a:82:27:fc:21:7c:6f:08:70:01:89:13:9c:9a:77:23:e5:a2:
ed:0c:f7:6f:df:a7:48:55:69:70:a1:ba:39:98:6c:43:a1:5e:
2c:c8:5c:e9:6b:d5:7b:0e:24:3d:be:76:16:97:30:1e:2e:60:
cf:31:92:b5:77:4c:9a:cb:78:27:20:7e:5a:fd:5b:5c:52:a0:
51:d3:a3:aa:42:b9:f8:51:ab:77:55:a0:51:a4:54:26:9e:38:
b7:df:da:1f
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZQkRNtxsa0pYpm4HPprekojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmM5MmU2ZGYzMWIzNTQ1YTE5NmZlMDM1YmNiNWEyNTMwNmE3ZjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOi87kTeYW2bfUg8zEDf8oa9iLYT
GqsQ/ujXyXyXOI9H13D5BeVL7N1Zq61nBsupLDtlTAJMnabjynzsRMHoTtk2wOfA
Xh0T8BMffK1BVf3je/0EXY5Vyt73TSyQqzciModZG/gzTk9L3082opXTaVbm+53P
nE5rJd5drg/sHKOdF9gW/AMQ2U7E5l63wIyqgGXaDKgiD9ks9/EKrH6xiXHFTwsH
ljQdFi5ggLGcyj6WEIu1qU85OKXZ1hHJcvkOCWTmDq4MXkwL3VVsBagR/9T54nOY
R5IGevB2EYzB60dSyAZPYbfNAmN6t92XMT9zDZXY12Fq38CkSCbr/vt1XQIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFHvJLm3zGzVFoZb+A1vLWiUwan9UMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhL2MxOTBi
MS01NjJmLTQ1YjEtOWEwNy00YmRiNTg4MTIwODYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvYzE5MGIx
LTU2MmYtNDViMS05YTA3LTRiZGI1ODgxMjA4Ni8xL2U4a3ViZk1iTlVXaGx2NERX
OHRhSlRCcWYxUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM/WTANBgkqhkiG9w0BAQsFAAOCAQEAYGOpvaL9S4hk
GTCUQmbu0Db3cSx3jTgCNaJtZnTT7yI874mdKjJ5Odtz1s9oLaQvbRczN2Z1fE4U
qBL5A2MMd2Wj5/xRO0QZF142HFKn2ngAYJw0+3duipPrW33TnR64eZagi8S5e41q
wdmW6S/X/zY3jytuzNx+rxtCJ7uhc0KhzKjytAlvgMmH8wQ5O9sR6p1vzNTbMnlW
R+VdbDC57TyCKoIn/CF8bwhwAYkTnJp3I+Wi7Qz3b9+nSFVpcKG6OZhsQ6FeLMhc
6WvVew4kPb52FpcwHi5gzzGStXdMmst4JyB+Wv1bXFKgUdOjqkK5+FGrd1WgUaRU
Jp44t9/aHw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:04:02 2025 by rpki-client