Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fTXAsgkTXCLMgAWnwuIixjwTbLA.cer
File: fTXAsgkTXCLMgAWnwuIixjwTbLA.cer (raw, json)
Hash identifier: X+wISP2eJVf1gLDDaR4bPZfQwM7I2uUEpDAh6Yrf2Nc=
Subject key identifier: 7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D6007634114C698FAC9B49D81C87E8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.67.176.0/21
IP: 185.39.236.0/22
IP: 2a01:5380::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:00:76:34:11:4c:69:8f:ac:9b:49:d8:1c:87:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d35c0b209135c22cc8005a7c2e222c63c136cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d9:76:bb:91:84:1e:ba:59:81:92:93:fa:3f:
dc:a0:4d:6f:c1:82:97:00:90:3b:2b:50:8c:b8:b5:
41:23:b1:52:59:7b:73:90:29:e0:a4:ee:42:32:02:
6c:5f:24:68:ef:c7:57:d7:b9:05:51:1b:36:f0:e8:
bb:dd:35:e9:24:ff:ce:b3:55:9e:ec:5e:af:dd:25:
99:a2:e7:46:4a:7a:ec:ef:95:a5:55:12:ce:8f:db:
c1:0d:94:80:a6:e8:29:8e:2e:de:40:de:94:47:5e:
59:af:99:87:fa:c6:4d:a2:b5:a8:97:89:75:55:2c:
97:6d:ec:2f:7b:93:1f:d5:24:9b:5b:0a:5f:64:4c:
3e:05:b5:4a:1e:58:10:76:85:25:a6:97:d6:51:d8:
00:f7:dd:98:49:cb:68:e1:b0:76:1e:0b:09:54:28:
06:38:53:45:2c:6e:8a:f9:85:46:c8:cd:9d:12:53:
45:cb:50:a3:cf:08:40:10:ab:55:5e:1d:61:d9:57:
85:11:46:3a:39:78:e1:74:82:66:24:64:ef:b8:ed:
d3:25:66:7f:af:0d:4f:8a:06:bd:f1:3b:2c:ad:f7:
e9:f0:65:da:34:ea:99:d4:b7:97:a8:bc:1f:a5:82:
96:3f:6d:08:fe:d8:80:b5:96:21:af:42:fe:10:14:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:35:C0:B2:09:13:5C:22:CC:80:05:A7:C2:E2:22:C6:3C:13:6C:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b9c906-1e85-4573-8f62-8257d51928a9/1/fTXAsgkTXCLMgAWnwuIixjwTbLA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.176.0/21
185.39.236.0/22
IPv6:
2a01:5380::/32
Signature Algorithm: sha256WithRSAEncryption
28:fe:b2:ae:37:a1:8d:5a:55:96:02:fc:4b:69:41:06:7b:91:
6e:03:32:c9:1b:b0:65:47:ba:b3:46:a1:f0:93:bd:db:e0:33:
36:5d:68:83:9f:22:8c:f3:1d:85:e0:c5:d6:35:10:81:4d:e7:
f7:79:0e:20:22:4c:7d:08:5a:8c:80:c8:6b:df:9a:05:ed:c8:
fb:1c:5a:c8:21:8c:82:5b:40:19:ca:99:64:3b:d6:07:e2:50:
cb:cd:05:2c:c2:b7:ca:29:e9:7c:7e:17:8e:a7:39:ed:07:ea:
6d:3a:c3:c4:31:2c:b8:e9:ba:c5:44:b3:c4:26:f0:8a:f1:40:
e4:0d:3f:7e:c0:25:97:42:05:09:60:5d:06:31:b8:cc:af:0d:
ba:1a:c3:1a:d4:b5:fa:ff:db:68:f8:d0:10:6a:b2:69:72:b5:
24:16:36:94:5e:b2:04:f1:d8:01:f1:dd:bd:65:8d:69:e3:8b:
17:57:cf:06:d5:1a:a6:a1:b7:38:f9:4b:46:0c:b5:8c:cd:3b:
01:9f:ba:7a:bf:9f:22:b1:8f:fc:7f:54:a0:e8:35:78:f4:9b:
a8:cc:c4:1f:d6:5e:13:a9:4e:5d:a1:0e:5d:df:1a:cd:70:3a:
4e:9f:13:bb:0e:ff:86:16:f4:1b:0d:48:d3:c3:2f:7f:82:40:
79:28:43:66
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZQg1gB2NBFMaY+sm0nYHIfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDM1YzBiMjA5MTM1YzIyY2M4MDA1YTdjMmUyMjJjNjNjMTM2Y2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9l2u5GEHrpZgZKT+j/coE1vwYKX
AJA7K1CMuLVBI7FSWXtzkCngpO5CMgJsXyRo78dX17kFURs28Oi73TXpJP/Os1We
7F6v3SWZoudGSnrs75WlVRLOj9vBDZSApugpji7eQN6UR15Zr5mH+sZNorWol4l1
VSyXbewve5Mf1SSbWwpfZEw+BbVKHlgQdoUlppfWUdgA992YScto4bB2HgsJVCgG
OFNFLG6K+YVGyM2dElNFy1CjzwhAEKtVXh1h2VeFEUY6OXjhdIJmJGTvuO3TJWZ/
rw1Piga98Tssrffp8GXaNOqZ1LeXqLwfpYKWP20I/tiAtZYhr0L+EBQgRQIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFH01wLIJE1wizIAFp8LiIsY8E2ywMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBjL2I5Yzkw
Ni0xZTg1LTQ1NzMtOGY2Mi04MjU3ZDUxOTI4YTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGMvYjljOTA2
LTFlODUtNDU3My04ZjYyLTgyNTdkNTE5MjhhOS8xL2ZUWEFzZ2tUWENMTWdBV253
dUlpeGp3VGJMQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDsEOwAwQCuSfsMA0EAgACMAcDBQAqAVOAMA0G
CSqGSIb3DQEBCwUAA4IBAQAo/rKuN6GNWlWWAvxLaUEGe5FuAzLJG7BlR7qzRqHw
k73b4DM2XWiDnyKM8x2F4MXWNRCBTef3eQ4gIkx9CFqMgMhr35oF7cj7HFrIIYyC
W0AZyplkO9YH4lDLzQUswrfKKel8fheOpzntB+ptOsPEMSy46brFRLPEJvCK8UDk
DT9+wCWXQgUJYF0GMbjMrw26GsMa1LX6/9to+NAQarJpcrUkFjaUXrIE8dgB8d29
ZY1p44sXV88G1Rqmobc4+UtGDLWMzTsBn7p6v58isY/8f1Sg6DV49JuozMQf1l4T
qU5doQ5d3xrNcDpOnxO7Dv+GFvQbDUjTwy9/gkB5KENm
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:16 2025 by rpki-client