Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer
File: fGXsjueSu10KPMcJrcrptoWp3ls.cer (raw, json)
Hash identifier: KXXH9iAiGIGHH4/hlQBAooLOR7UfhYomj/kC2+xM9No=
Subject key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1D96853131DDBFC9C23A236E30E65
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.127.96.0/22
IP: 2a03:96a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d9:68:53:13:1d:db:fc:9c:23:a2:36:e3:0e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6e:0c:e6:8e:88:47:d7:2c:51:6d:01:3d:98:
70:66:b6:9a:cb:5d:5d:08:98:9d:c6:9b:80:7e:6a:
f7:63:6c:9b:5e:d2:ab:0e:1a:5a:c3:65:0b:e3:0e:
18:31:04:14:65:de:af:64:36:c4:d9:cc:f8:68:dd:
c0:a0:1e:1d:d8:c2:99:f4:8c:83:45:4f:09:9e:ae:
e0:f8:ca:84:0a:2a:81:49:4f:2b:1d:f2:80:6f:b9:
ec:4d:7d:fe:8d:6e:30:ba:12:41:af:3f:7f:0c:c5:
5d:b6:70:1a:80:39:02:ce:83:45:82:3c:0a:b2:7b:
1d:f0:0d:dd:df:85:77:fc:0d:b7:3e:8b:e9:f8:10:
5c:55:19:8e:45:ee:8e:47:9a:52:1f:e1:66:a8:cf:
d2:4f:6d:b6:ec:99:c3:ec:84:c3:77:0f:cd:22:be:
fd:7d:e2:da:7e:35:b9:82:d6:a6:ac:1d:d9:d3:d6:
55:2a:c2:41:31:ec:d5:9b:f0:5e:d3:81:d0:63:7c:
17:37:19:ca:69:24:67:5a:27:d1:d6:b2:36:ff:3c:
9d:47:c7:c9:f0:70:55:1e:2f:a7:1d:e2:69:5a:15:
de:da:7d:b8:c9:85:8d:a4:dd:55:9a:30:10:c8:98:
c9:03:46:bc:64:92:0d:a1:48:25:bf:a3:51:18:ed:
ff:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.96.0/22
IPv6:
2a03:96a0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:7e:5c:be:64:91:25:a8:a9:a4:9b:35:9e:e3:10:b9:34:6f:
6a:8b:d4:e9:58:c6:a3:26:90:97:70:2b:c2:d4:f8:75:88:c0:
09:74:52:aa:9c:97:2b:7d:3f:eb:4b:0d:76:03:c7:71:7b:4c:
f1:c4:81:0d:78:40:9c:1c:df:96:e4:ab:3a:e9:fa:e1:19:04:
ee:58:3d:a2:f1:2d:a6:8b:d0:d1:b3:bc:18:a7:62:0e:4c:f1:
65:3c:fe:39:5c:ec:01:94:7e:42:9f:c3:b3:d2:f7:50:54:fa:
d1:87:03:91:cc:ce:cd:97:ef:0b:24:9d:97:19:07:c7:52:a5:
5a:ea:c1:d4:88:6d:18:55:2a:23:24:3a:46:31:49:ab:6f:4a:
b7:03:b2:82:bf:69:c1:69:a0:07:a9:98:99:b6:69:ce:15:14:
50:44:7d:e6:ae:30:e2:50:ee:21:0e:bb:f2:4a:f1:18:0d:b3:
bd:03:3b:a7:9d:5b:a2:16:a0:54:a4:60:ac:70:f5:63:05:9c:
64:63:fa:9b:41:2d:78:40:b2:85:54:ba:61:88:b0:b4:23:e0:
fc:51:01:73:ba:e9:e7:66:92:10:a8:39:ee:ff:78:57:b5:ca:
19:bd:34:da:cf:5f:ef:8f:a6:9a:c1:38:24:bd:e2:a8:0e:a1:
1d:d4:d2:ab
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQhsdloUxMd2/ycI6I24w5lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzY1ZWM4ZWU3OTJiYjVkMGEzY2M3MDlhZGNhZTliNjg1YTlkZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG4M5o6IR9csUW0BPZhwZraay11d
CJidxpuAfmr3Y2ybXtKrDhpaw2UL4w4YMQQUZd6vZDbE2cz4aN3AoB4d2MKZ9IyD
RU8Jnq7g+MqECiqBSU8rHfKAb7nsTX3+jW4wuhJBrz9/DMVdtnAagDkCzoNFgjwK
snsd8A3d34V3/A23Povp+BBcVRmORe6OR5pSH+FmqM/ST2227JnD7ITDdw/NIr79
feLafjW5gtamrB3Z09ZVKsJBMezVm/Be04HQY3wXNxnKaSRnWifR1rI2/zydR8fJ
8HBVHi+nHeJpWhXe2n24yYWNpN1VmjAQyJjJA0a8ZJINoUglv6NRGO3/iQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHxl7I7nkrtdCjzHCa3K6baFqd5bMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY5LzU3M2U2
OS01NTBlLTQ0YTktYTBjZi02M2I5NTBhYTNlMWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvNTczZTY5
LTU1MGUtNDRhOS1hMGNmLTYzYjk1MGFhM2UxZC8xL2ZHWHNqdWVTdTEwS1BNY0py
Y3JwdG9XcDNscy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuX9gMA0EAgACMAcDBQAqA5agMA0GCSqGSIb3
DQEBCwUAA4IBAQCKfly+ZJElqKmkmzWe4xC5NG9qi9TpWMajJpCXcCvC1Ph1iMAJ
dFKqnJcrfT/rSw12A8dxe0zxxIENeECcHN+W5Ks66frhGQTuWD2i8S2mi9DRs7wY
p2IOTPFlPP45XOwBlH5Cn8Oz0vdQVPrRhwORzM7Nl+8LJJ2XGQfHUqVa6sHUiG0Y
VSojJDpGMUmrb0q3A7KCv2nBaaAHqZiZtmnOFRRQRH3mrjDiUO4hDrvySvEYDbO9
AzunnVuiFqBUpGCscPVjBZxkY/qbQS14QLKFVLphiLC0I+D8UQFzuunnZpIQqDnu
/3hXtcoZvTTaz1/vj6aawTgkveKoDqEd1NKr
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:45 2025 by rpki-client