Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3BJpbLfBi_E4RlYQGU8P1kgySE.cer
File: f3BJpbLfBi_E4RlYQGU8P1kgySE.cer (raw, json)
Hash identifier: QDDU0hDbQvqY0N66eIRewd00/5MhV1Is4gT8vw4l0R8=
Subject key identifier: 7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3AFDF4B96ACF5094396A945B73446
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.79.224.0/20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:af:df:4b:96:ac:f5:09:43:96:a9:45:b7:34:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f7049a5b2df062fc4e1195840653c3f5920c921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:80:47:e2:75:b0:c0:98:45:d2:e6:c0:a1:
5b:a4:0e:74:63:c2:bc:8a:24:0e:9a:c9:76:6f:d1:
e9:47:c7:26:ec:87:89:f3:49:c7:64:f8:4f:e9:cf:
53:47:84:3a:bc:ff:9e:49:9d:23:1d:ac:3f:92:4a:
8f:a2:e3:49:03:f9:85:f4:ee:ce:0f:de:0d:b0:04:
fa:65:7e:e5:ff:08:2a:62:09:5f:9d:65:37:98:ab:
dd:75:7b:4f:e5:3f:1b:27:ab:70:03:72:50:41:c3:
cd:38:6b:a2:6f:2e:70:47:2f:f1:1c:15:4d:9b:e5:
41:e0:03:45:0e:32:53:2d:57:b0:44:8a:dd:16:44:
60:9f:fa:29:9c:ef:73:a9:ea:0c:e3:e5:ca:e4:10:
ae:ec:54:9b:1d:0d:97:0d:47:19:87:8f:6e:f5:84:
ac:65:9d:c2:f8:af:0c:c4:ce:14:95:6a:91:0f:93:
d3:38:db:10:93:d0:e6:f7:02:16:f0:a5:c1:5c:c6:
ab:41:46:29:b1:85:7b:34:d8:f8:ac:20:c8:02:68:
a8:fd:97:1f:68:7b:4d:92:e8:4a:b0:be:2b:8b:af:
54:9c:a4:29:d1:7d:b1:2b:96:01:40:c4:66:62:62:
64:7e:c2:d5:f8:61:85:20:70:65:2e:c0:70:a7:a9:
9b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:70:49:A5:B2:DF:06:2F:C4:E1:19:58:40:65:3C:3F:59:20:C9:21
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a3b09c-a94a-46e5-a776-f40ed501f1df/1/f3BJpbLfBi_E4RlYQGU8P1kgySE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.224.0/20
Signature Algorithm: sha256WithRSAEncryption
9b:7b:de:01:67:0d:37:eb:55:63:de:a8:50:7e:16:6a:48:48:
88:96:f2:ab:75:4a:aa:25:4e:12:b0:72:41:11:c8:1e:ed:03:
c9:37:52:f9:73:ef:36:92:28:13:0b:e2:63:49:f4:b6:48:99:
e3:2f:67:9f:08:78:99:f7:8b:31:82:e6:52:26:c5:b0:17:05:
a0:d5:3a:83:a4:1a:9a:33:a0:2a:c1:c7:56:04:c1:00:9e:f8:
a6:4e:66:89:49:1d:f8:a9:7b:f4:de:e3:ff:23:c2:cf:00:66:
3d:c9:5c:e2:4b:80:c1:b3:f6:c4:56:52:5f:35:39:41:cf:d8:
40:58:07:4a:37:51:36:c6:21:a0:ad:16:db:89:19:d3:10:95:
32:f4:5e:26:c5:13:d1:be:30:67:dd:b2:d7:7b:d3:b3:e4:46:
8a:a7:81:63:51:9e:5f:9f:e2:6a:4a:9a:c9:fc:2d:33:7d:05:
32:f2:1d:72:f0:63:4a:5f:fc:e4:11:f9:65:99:0f:18:42:4a:
91:ba:0e:1e:63:d4:48:39:ae:88:15:2b:d6:1b:a8:03:5b:f0:
3e:47:cf:ac:dc:c4:0b:45:ab:cd:28:2b:68:2a:ed:39:57:db:
20:58:f3:54:92:db:88:1b:0b:16:65:f7:80:7b:d5:2d:78:6d:
1a:8e:7f:f9
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQks6/fS5as9QlDlqlFtzRGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjcwNDlhNWIyZGYwNjJmYzRlMTE5NTg0MDY1M2MzZjU5MjBjOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx32AR+J1sMCYRdLmwKFbpA50Y8K8
iiQOmsl2b9HpR8cm7IeJ80nHZPhP6c9TR4Q6vP+eSZ0jHaw/kkqPouNJA/mF9O7O
D94NsAT6ZX7l/wgqYglfnWU3mKvddXtP5T8bJ6twA3JQQcPNOGuiby5wRy/xHBVN
m+VB4ANFDjJTLVewRIrdFkRgn/opnO9zqeoM4+XK5BCu7FSbHQ2XDUcZh49u9YSs
ZZ3C+K8MxM4UlWqRD5PTONsQk9Dm9wIW8KXBXMarQUYpsYV7NNj4rCDIAmio/Zcf
aHtNkuhKsL4ri69UnKQp0X2xK5YBQMRmYmJkfsLV+GGFIHBlLsBwp6mbDwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFH9wSaWy3wYvxOEZWEBlPD9ZIMkhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E5L2EzYjA5
Yy1hOTRhLTQ2ZTUtYTc3Ni1mNDBlZDUwMWYxZGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTkvYTNiMDlj
LWE5NGEtNDZlNS1hNzc2LWY0MGVkNTAxZjFkZi8xL2YzQkpwYkxmQmlfRTRSbFlR
R1U4UDFrZ3lTRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQEwk/gMA0GCSqGSIb3DQEBCwUAA4IBAQCbe94B
Zw0361Vj3qhQfhZqSEiIlvKrdUqqJU4SsHJBEcge7QPJN1L5c+82kigTC+JjSfS2
SJnjL2efCHiZ94sxguZSJsWwFwWg1TqDpBqaM6AqwcdWBMEAnvimTmaJSR34qXv0
3uP/I8LPAGY9yVziS4DBs/bEVlJfNTlBz9hAWAdKN1E2xiGgrRbbiRnTEJUy9F4m
xRPRvjBn3bLXe9Oz5EaKp4FjUZ5fn+JqSprJ/C0zfQUy8h1y8GNKX/zkEfllmQ8Y
QkqRug4eY9RIOa6IFSvWG6gDW/A+R8+s3MQLRavNKCtoKu05V9sgWPNUktuIGwsW
ZfeAe9UteG0ajn/5
-----END CERTIFICATE-----
Generated at Sun Feb 2 04:03:56 2025 by rpki-client