Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
File: eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer (raw, json)
Hash identifier: Ll7E3NX6UQ8r6RuX45X32ruzs7VdxxZDCTx6oDdlOi0=
Subject key identifier: 79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5A48043E4C4A9EDA9F678C32E65B8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 178.22.208.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a4:80:43:e4:c4:a9:ed:a9:f6:78:c3:2e:65:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:33:a2:2c:9f:c6:3c:d6:0a:38:c8:23:67:54:
60:e1:97:c8:77:f0:89:97:4b:85:0f:8f:6d:ee:ca:
e3:82:c6:56:08:7c:06:91:ea:79:75:19:7b:be:b6:
4f:fc:d6:f5:3d:86:0a:7e:ae:c3:78:43:6a:db:40:
48:0a:5b:2d:91:22:44:f8:48:81:fe:6b:7c:56:0b:
81:69:b5:7e:75:4f:49:76:1f:36:98:0d:e4:af:c7:
55:01:69:08:dd:ca:44:44:4c:fa:f7:59:35:74:8b:
c9:67:cf:59:cb:fb:b2:a5:a0:e4:53:f3:5c:cc:1f:
11:fb:78:85:b2:5e:35:bd:76:a8:8e:fc:e5:d6:6d:
89:89:d3:5b:89:90:1f:ac:e6:6e:a2:0d:c0:c5:73:
6a:2c:e6:c9:d6:53:99:fa:01:13:e7:ea:9e:16:c6:
ca:62:ce:b3:3c:4a:f9:6d:78:f9:ef:db:b4:ae:5d:
79:e9:90:a8:07:85:9d:d8:93:2c:89:21:bf:4b:00:
33:33:87:65:91:14:4e:28:60:39:21:2b:37:f8:1e:
79:74:9a:0b:1b:1f:34:dd:48:5a:5e:5b:2f:79:3c:
12:49:65:e3:ff:7b:61:70:a9:c7:19:4f:7e:dc:7e:
ab:ef:5a:b9:31:72:dd:a5:3e:d2:1b:d0:49:5f:c0:
22:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.208.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:50:af:29:60:74:e6:2f:6e:9a:de:48:49:c9:16:88:56:a9:
d7:7f:61:dd:df:a6:d9:ab:2a:35:72:5b:34:8d:9f:d2:06:3b:
85:fa:fb:58:c1:02:66:01:9c:57:94:73:69:ad:e2:bd:ea:16:
30:88:d6:9c:f2:aa:5e:32:e9:67:3b:fe:b8:96:78:02:7f:f8:
01:a5:25:e2:ba:eb:8e:b5:18:90:59:23:99:cf:fe:50:a5:62:
bb:81:0d:7a:20:d1:49:49:93:ab:7b:20:0f:bc:47:2d:f7:e6:
c1:7a:69:23:15:89:28:ea:2d:56:15:f5:09:20:91:de:4a:98:
8b:96:b2:58:53:e7:22:53:08:f8:06:fb:ab:ec:29:07:44:94:
2b:0e:63:1b:60:bc:47:19:60:12:ab:fb:29:f2:56:ab:d2:94:
b3:2c:de:ff:32:d8:26:3b:eb:0b:6d:ce:d8:ee:1e:96:36:c0:
86:07:18:cb:9b:68:49:cb:b0:ba:26:5f:b7:0c:be:9e:37:72:
bc:0e:09:ad:58:54:be:3e:42:f2:f3:02:7b:65:45:06:e2:4a:
ff:3a:c1:b2:4d:4d:96:e1:b5:f3:b0:05:4d:e1:a2:20:58:70:
39:4a:fe:26:17:77:6c:b4:2c:58:1e:5b:60:5b:7b:2c:b3:28:
15:33:a0:ae
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQntaSAQ+TEqe2p9njDLmW4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTYxYWQ3MzFjNGM3NTI1Zjg4NWM1ZDM3NjRkNGNlMGYwZThjOThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TOiLJ/GPNYKOMgjZ1Rg4ZfId/CJ
l0uFD49t7srjgsZWCHwGkep5dRl7vrZP/Nb1PYYKfq7DeENq20BIClstkSJE+EiB
/mt8VguBabV+dU9Jdh82mA3kr8dVAWkI3cpEREz691k1dIvJZ89Zy/uypaDkU/Nc
zB8R+3iFsl41vXaojvzl1m2JidNbiZAfrOZuog3AxXNqLObJ1lOZ+gET5+qeFsbK
Ys6zPEr5bXj579u0rl156ZCoB4Wd2JMsiSG/SwAzM4dlkRROKGA5ISs3+B55dJoL
Gx803UhaXlsveTwSSWXj/3thcKnHGU9+3H6r71q5MXLdpT7SG9BJX8AiLwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFHlhrXMcTHUl+IXF03ZNTODw6MmPMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q2L2NiMTdj
YS1kMDJmLTQwMjItYWQwNi04YWFjYzFmNDgxMDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDYvY2IxN2Nh
LWQwMmYtNDAyMi1hZDA2LThhYWNjMWY0ODEwOC8xL2VXR3RjeHhNZFNYNGhjWFRk
azFNNFBEb3lZOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDshbQMA0GCSqGSIb3DQEBCwUAA4IBAQCkUK8p
YHTmL26a3khJyRaIVqnXf2Hd36bZqyo1cls0jZ/SBjuF+vtYwQJmAZxXlHNpreK9
6hYwiNac8qpeMulnO/64lngCf/gBpSXiuuuOtRiQWSOZz/5QpWK7gQ16INFJSZOr
eyAPvEct9+bBemkjFYko6i1WFfUJIJHeSpiLlrJYU+ciUwj4Bvur7CkHRJQrDmMb
YLxHGWASq/sp8lar0pSzLN7/MtgmO+sLbc7Y7h6WNsCGBxjLm2hJy7C6Jl+3DL6e
N3K8DgmtWFS+PkLy8wJ7ZUUG4kr/OsGyTU2W4bXzsAVN4aIgWHA5Sv4mF3dstCxY
HltgW3sssygVM6Cu
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:58:41 2025 by rpki-client