Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer
File: hU6Dg-ggiTaAI2KgnzYIWlD82Fo.cer (raw, json)
Hash identifier: cBFQ+M95FysI8qYNYK8nyhy4vYJ8Ttt3b0TLSKdyl2w=
Subject key identifier: 85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5CA34A5E4AE896F74898E44BDC6E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 137.56.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ca:34:a5:e4:ae:89:6f:74:89:8e:44:bd:c6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=854e8383e8208936802362a09f36085a50fcd85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:28:29:3c:85:4d:98:94:bb:bc:df:03:4d:
a6:5e:a1:30:0a:0b:5f:b9:93:6a:d5:8b:d8:43:71:
ef:95:b9:89:df:04:ab:f7:f7:26:c8:7b:0a:ed:d9:
ab:04:d0:80:41:5c:cf:fa:75:2b:54:71:1f:ee:75:
e9:de:3f:0c:2c:7a:b6:9d:70:2b:da:88:22:ac:14:
96:77:fb:af:09:2a:7e:c9:70:93:66:19:5f:05:62:
01:61:f1:22:1f:21:ed:00:6f:59:3e:49:94:5f:12:
a0:1b:00:1b:26:3b:c8:92:9c:68:a1:57:9d:9f:fa:
3e:dc:64:54:b7:63:42:34:84:3b:e9:f8:91:ab:03:
1a:7f:85:6b:0c:4e:7b:64:b5:93:14:29:44:1b:77:
82:c2:c3:97:6a:2e:51:37:9c:6b:ac:d0:3d:c4:43:
76:a2:f7:0e:f2:82:88:0d:d2:41:55:69:97:a6:04:
04:1c:0c:4c:8f:f7:b3:47:2e:63:52:3f:c3:b1:bc:
d5:ac:f9:b4:53:48:7b:9b:2e:64:95:27:9c:39:93:
f8:00:09:14:e1:42:02:42:9f:2f:61:6f:da:f0:94:
5a:9e:bd:47:b9:6d:6e:3a:fa:dc:1c:59:0e:6a:c9:
85:15:1e:4e:47:77:75:9a:1b:b9:24:ed:5e:2e:a4:
ae:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4E:83:83:E8:20:89:36:80:23:62:A0:9F:36:08:5A:50:FC:D8:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e1edab-2439-4a7c-984c-e6ff7ca3ecef/1/hU6Dg-ggiTaAI2KgnzYIWlD82Fo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.56.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7a:2e:50:f2:04:10:b3:c2:3b:22:3d:0b:65:6b:c7:56:41:a1:
fa:91:84:ce:a3:f6:59:11:ac:e8:67:79:4b:2c:4d:1f:f6:7a:
46:00:71:2c:02:ee:a4:a7:fa:18:30:fd:5c:cb:5e:e6:d6:f2:
fc:82:90:54:18:f0:9c:fd:df:50:42:8a:2d:be:44:24:c8:df:
e7:2f:79:bf:a7:df:f5:f6:b9:a7:5c:b3:af:ff:6a:81:b1:bc:
10:87:7e:13:c1:83:5e:d0:f4:78:1c:77:78:63:aa:89:24:6b:
e4:b9:ae:f9:8c:9f:3a:29:4e:b8:70:ce:5f:99:59:6e:ef:92:
5a:79:67:b5:d4:89:0e:3c:24:af:91:13:34:a8:40:c2:b5:19:
0c:28:68:01:07:04:95:c6:1c:68:25:80:3f:17:e1:a1:be:f2:
23:08:34:13:00:03:14:ab:2f:e4:58:e0:1b:12:8f:82:a5:9f:
35:bb:5e:80:69:5a:ff:7f:9c:22:53:84:6e:2c:3d:6b:c5:b0:
e6:ce:70:6b:cc:c7:2b:79:cd:52:dd:db:58:31:ef:a5:2d:f7:
c9:61:49:20:01:eb:55:2e:b2:70:e6:cf:75:4d:2f:4e:96:22:
7c:c3:4d:92:cd:df:81:bb:5e:5a:72:20:ed:65:85:10:fa:47:
f6:df:f7:d6
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZQg1co0peSuiW90iY5EvcbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTRlODM4M2U4MjA4OTM2ODAyMzYyYTA5ZjM2MDg1YTUwZmNkODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQAoKTyFTZiUu7zfA02mXqEwCgtf
uZNq1YvYQ3HvlbmJ3wSr9/cmyHsK7dmrBNCAQVzP+nUrVHEf7nXp3j8MLHq2nXAr
2ogirBSWd/uvCSp+yXCTZhlfBWIBYfEiHyHtAG9ZPkmUXxKgGwAbJjvIkpxooVed
n/o+3GRUt2NCNIQ76fiRqwMaf4VrDE57ZLWTFClEG3eCwsOXai5RN5xrrNA9xEN2
ovcO8oKIDdJBVWmXpgQEHAxMj/ezRy5jUj/DsbzVrPm0U0h7my5klSecOZP4AAkU
4UICQp8vYW/a8JRanr1HuW1uOvrcHFkOasmFFR5OR3d1mhu5JO1eLqSuiwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFIVOg4PoIIk2gCNioJ82CFpQ/NhaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RiL2UxZWRh
Yi0yNDM5LTRhN2MtOTg0Yy1lNmZmN2NhM2VjZWYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGIvZTFlZGFi
LTI0MzktNGE3Yy05ODRjLWU2ZmY3Y2EzZWNlZi8xL2hVNkRnLWdnaVRhQUkyS2du
ellJV2xEODJGby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAiTgwDQYJKoZIhvcNAQELBQADggEBAHouUPIE
ELPCOyI9C2Vrx1ZBofqRhM6j9lkRrOhneUssTR/2ekYAcSwC7qSn+hgw/VzLXubW
8vyCkFQY8Jz931BCii2+RCTI3+cveb+n3/X2uadcs6//aoGxvBCHfhPBg17Q9Hgc
d3hjqokka+S5rvmMnzopTrhwzl+ZWW7vklp5Z7XUiQ48JK+REzSoQMK1GQwoaAEH
BJXGHGglgD8X4aG+8iMINBMAAxSrL+RY4BsSj4KlnzW7XoBpWv9/nCJThG4sPWvF
sObOcGvMxyt5zVLd21gx76Ut98lhSSAB61UusnDmz3VNL06WInzDTZLN34G7Xlpy
IO1lhRD6R/bf99Y=
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:03:54 2025 by rpki-client