Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gYFECjZ6NNMGvA9oWunNhpUvf5U.cer
File: gYFECjZ6NNMGvA9oWunNhpUvf5U.cer (raw, json)
Hash identifier: mm84YUz/oPAmyhIB2zk7lvQ9404xqMxs7x/B/SZYV0o=
Subject key identifier: 81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01956BE25CA80CCE67D8A0BEDAB061BDC25B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 06 Mar 2025 14:35:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 78.40.111.0/24
IP: 171.22.18.0/24
IP: 2a14:8880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:e2:5c:a8:0c:ce:67:d8:a0:be:da:b0:61:bd:c2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 6 14:35:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8181440a367a34d306bc0f685ae9cd86952f7f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cd:c7:4c:76:b3:e1:94:83:ca:f0:fb:1b:ce:
8b:d8:87:02:d5:e9:63:4f:cf:72:11:14:f4:48:19:
ff:c5:de:82:24:66:71:84:06:02:b7:18:bd:9e:61:
e2:1c:68:48:dd:f2:be:a8:41:38:9d:59:36:c2:3b:
12:98:41:8c:32:81:6b:28:9f:57:d4:91:c1:06:f4:
4e:e2:63:ac:92:74:d9:1c:6e:ad:b8:47:e3:a8:f8:
43:44:34:72:bc:af:57:b5:6e:d0:e6:60:18:74:94:
8b:c7:96:09:8d:01:39:63:63:74:f9:b1:08:fc:3e:
7a:26:72:eb:bf:9b:ec:73:c0:51:e8:ec:06:a3:0f:
03:3c:49:b9:aa:da:c6:d2:d8:34:42:09:a4:1a:64:
5e:89:04:c2:fa:93:72:1b:32:16:1c:33:79:c0:6c:
a3:40:6d:06:34:60:f2:f9:2d:5f:ef:8a:5c:0e:ff:
01:8e:f4:02:15:e3:a9:f0:ba:78:02:ae:61:db:2a:
f6:9b:6d:54:72:b5:7b:b5:66:97:f4:1b:69:e7:f2:
67:91:2b:e5:21:22:23:ae:89:f8:96:12:d9:9c:7a:
80:d1:e9:03:6c:65:a2:5f:e8:39:a8:dc:30:d5:e5:
8d:b3:ff:28:48:e1:15:53:36:62:7f:77:c7:ad:08:
43:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:81:44:0A:36:7A:34:D3:06:BC:0F:68:5A:E9:CD:86:95:2F:7F:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/162f8f-687f-4671-a524-55691a569720/1/gYFECjZ6NNMGvA9oWunNhpUvf5U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.111.0/24
171.22.18.0/24
IPv6:
2a14:8880::/29
Signature Algorithm: sha256WithRSAEncryption
a2:83:58:0b:89:06:78:39:bb:d4:43:eb:fe:79:79:33:23:32:
ca:d6:1e:0c:a1:b3:68:08:2c:67:3f:85:12:42:50:20:dd:76:
dd:4f:cc:84:76:7a:55:c4:62:26:4c:ee:b8:77:41:15:5e:53:
90:60:60:70:d8:c0:bc:5a:2c:32:99:a3:14:ba:67:a7:11:ce:
4f:bc:f6:1d:07:de:a0:f4:ba:06:c5:cd:f6:03:b0:f3:d4:03:
5b:65:2f:75:cc:e1:c1:90:52:93:1e:55:df:2d:c8:6a:dc:be:
a6:2b:68:39:b9:88:2b:91:44:f2:ed:a1:1f:12:e5:7b:85:04:
a0:d0:2b:f4:ae:0b:d3:a2:8a:c2:f5:b8:ad:ff:ce:e2:b0:ab:
0c:0a:90:fd:76:24:df:6c:72:05:3a:3f:e7:14:34:5e:3c:40:
9e:a4:9b:dd:01:b8:87:73:72:58:4a:39:53:fe:28:a5:fa:72:
83:48:1b:52:98:90:ef:aa:c5:06:50:69:1c:7b:29:f0:56:19:
8c:1d:40:ed:7a:34:be:5c:98:d4:99:58:34:5e:a3:71:a8:f9:
2c:71:34:35:76:01:6a:9d:ca:03:08:0e:08:0b:96:af:df:19:
c6:74:34:35:d3:91:33:28:55:ef:14:10:71:08:3a:4b:31:17:
91:7b:af:54
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZVr4lyoDM5n2KC+2rBhvcJbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMzA2MTQzNTUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTgxNDQwYTM2N2EzNGQzMDZiYzBmNjg1YWU5Y2Q4Njk1MmY3Zjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys3HTHaz4ZSDyvD7G86L2IcC1elj
T89yERT0SBn/xd6CJGZxhAYCtxi9nmHiHGhI3fK+qEE4nVk2wjsSmEGMMoFrKJ9X
1JHBBvRO4mOsknTZHG6tuEfjqPhDRDRyvK9XtW7Q5mAYdJSLx5YJjQE5Y2N0+bEI
/D56JnLrv5vsc8BR6OwGow8DPEm5qtrG0tg0QgmkGmReiQTC+pNyGzIWHDN5wGyj
QG0GNGDy+S1f74pcDv8BjvQCFeOp8Lp4Aq5h2yr2m21UcrV7tWaX9Btp5/JnkSvl
ISIjron4lhLZnHqA0ekDbGWiX+g5qNww1eWNs/8oSOEVUzZif3fHrQhD/QIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFIGBRAo2ejTTBrwPaFrpzYaVL3+VMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RkLzE2MmY4
Zi02ODdmLTQ2NzEtYTUyNC01NTY5MWE1Njk3MjAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGQvMTYyZjhm
LTY4N2YtNDY3MS1hNTI0LTU1NjkxYTU2OTcyMC8xL2dZRkVDalo2Tk5NR3ZBOW9X
dW5OaHBVdmY1VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQATihvAwQAqxYSMA0EAgACMAcDBQMqFIiAMA0G
CSqGSIb3DQEBCwUAA4IBAQCig1gLiQZ4ObvUQ+v+eXkzIzLK1h4MobNoCCxnP4US
QlAg3XbdT8yEdnpVxGImTO64d0EVXlOQYGBw2MC8WiwymaMUumenEc5PvPYdB96g
9LoGxc32A7Dz1ANbZS91zOHBkFKTHlXfLchq3L6mK2g5uYgrkUTy7aEfEuV7hQSg
0Cv0rgvToorC9bit/87isKsMCpD9diTfbHIFOj/nFDRePECepJvdAbiHc3JYSjlT
/iil+nKDSBtSmJDvqsUGUGkceynwVhmMHUDtejS+XJjUmVg0XqNxqPkscTQ1dgFq
ncoDCA4IC5av3xnGdDQ105EzKFXvFBBxCDpLMReRe69U
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:23:26 2025 by rpki-client