Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/igKbHrUc1PS8TdmFoOxlOnXspAw.cer
File: igKbHrUc1PS8TdmFoOxlOnXspAw.cer (raw, json)
Hash identifier: qtT5jLs347LP7VvOVUFqdfTpx11tamhs0wgmjWfQKho=
Subject key identifier: 8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444F3AAB741CF0FFAE7674427A0D087
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 84.241.64.0/18
IP: 185.92.64.0/22
IP: 2a01:b540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f3:aa:b7:41:cf:0f:fa:e7:67:44:27:a0:d0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a029b1eb51cd4f4bc4dd985a0ec653a75eca40c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:e8:d7:86:c8:2b:d3:65:7f:ec:d7:f6:53:
83:9e:1a:b0:3f:77:a1:71:d3:04:f2:d9:8e:46:b1:
64:d8:8a:7a:e4:e3:6b:9f:13:23:03:33:a3:92:bf:
15:62:2e:a7:c0:10:e2:bd:ec:35:24:07:a6:88:16:
a7:32:33:c5:0f:b2:43:54:db:08:77:02:78:63:a0:
b4:88:e8:4a:55:2c:9e:8a:66:7f:93:48:52:ce:b6:
77:b5:69:4f:d8:4c:d0:57:de:5a:e4:c1:84:df:37:
67:b5:0e:9e:e7:ed:96:63:4e:10:28:1b:ef:08:de:
7f:2d:a0:6e:cf:02:0a:14:6a:a3:76:cf:4e:0f:f6:
a4:1b:d4:2e:46:58:3b:da:1c:64:52:73:cd:34:43:
3c:55:d8:f4:3c:1f:62:f7:f5:3f:43:f8:4c:9f:24:
ad:da:c4:bd:3d:d0:67:16:1c:86:73:07:76:dc:6a:
83:3f:78:94:71:f8:19:83:43:0c:a7:30:86:2b:60:
d8:ef:15:9c:14:9f:e6:2c:d4:d6:84:c1:14:70:b4:
98:ba:f8:b1:d2:5d:1d:ac:2d:1d:93:56:ed:1b:99:
dc:6b:34:94:13:72:cf:07:f3:c3:c0:00:56:f1:76:
84:22:33:49:39:1f:be:82:b8:aa:0b:7c:38:da:a2:
6a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:02:9B:1E:B5:1C:D4:F4:BC:4D:D9:85:A0:EC:65:3A:75:EC:A4:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8d20bb-d72d-47aa-be48-38269cef5e01/1/igKbHrUc1PS8TdmFoOxlOnXspAw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.241.64.0/18
185.92.64.0/22
IPv6:
2a01:b540::/29
Signature Algorithm: sha256WithRSAEncryption
1c:87:97:eb:ce:8f:a0:5e:b5:23:cd:68:17:39:45:73:59:94:
e8:aa:54:1e:19:a1:90:4b:ec:b7:55:cb:ff:90:8b:b1:75:46:
68:9b:c4:9c:bc:7a:40:dc:98:a8:a3:ce:c4:5a:66:1f:0c:ad:
a9:b4:9f:8e:96:3c:36:3a:c0:9c:1d:ff:73:e1:c4:19:6d:ee:
39:69:80:a1:c0:b7:ab:b0:81:2a:03:09:41:ea:fd:97:11:d2:
ca:24:fd:2f:05:01:70:81:d0:1a:a1:f7:62:ef:9f:5a:c5:30:
57:23:48:f6:0d:0e:1c:33:a9:b7:ee:c7:90:72:11:9b:a1:7a:
1d:66:8a:e0:08:57:d2:82:bc:b7:52:2c:97:73:08:bd:13:1c:
09:12:23:85:a7:ce:ff:43:c2:fb:30:e0:27:e3:8c:9f:20:31:
1c:b9:7e:ae:e0:37:bb:43:5a:55:39:5a:c6:6e:2a:9c:18:a0:
50:2c:65:09:a6:5a:21:54:fc:78:15:d2:1a:f9:d8:9a:4c:f0:
6b:63:b8:4b:ce:f5:52:f5:a4:96:79:01:bb:32:ab:59:54:f4:
56:cb:33:0a:48:f2:49:d7:27:c1:30:14:3e:46:cc:9e:46:3b:
01:fa:e3:11:8c:e6:65:e5:d7:0c:c9:46:da:a7:77:a3:b3:c4:
ee:90:2f:c1
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZQkRPOqt0HPD/rnZ0QnoNCHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTAyOWIxZWI1MWNkNGY0YmM0ZGQ5ODVhMGVjNjUzYTc1ZWNhNDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPbo14bIK9Nlf+zX9lODnhqwP3eh
cdME8tmORrFk2Ip65ONrnxMjAzOjkr8VYi6nwBDivew1JAemiBanMjPFD7JDVNsI
dwJ4Y6C0iOhKVSyeimZ/k0hSzrZ3tWlP2EzQV95a5MGE3zdntQ6e5+2WY04QKBvv
CN5/LaBuzwIKFGqjds9OD/akG9QuRlg72hxkUnPNNEM8Vdj0PB9i9/U/Q/hMnySt
2sS9PdBnFhyGcwd23GqDP3iUcfgZg0MMpzCGK2DY7xWcFJ/mLNTWhMEUcLSYuvix
0l0drC0dk1btG5ncazSUE3LPB/PDwABW8XaEIjNJOR++griqC3w42qJqLwIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFIoCmx61HNT0vE3ZhaDsZTp17KQMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzLzhkMjBi
Yi1kNzJkLTQ3YWEtYmU0OC0zODI2OWNlZjVlMDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvOGQyMGJi
LWQ3MmQtNDdhYS1iZTQ4LTM4MjY5Y2VmNWUwMS8xL2lnS2JIclVjMVBTOFRkbUZv
T3hsT25Yc3BBdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQGVPFAAwQCuVxAMA0EAgACMAcDBQMqAbVAMA0G
CSqGSIb3DQEBCwUAA4IBAQAch5frzo+gXrUjzWgXOUVzWZToqlQeGaGQS+y3Vcv/
kIuxdUZom8ScvHpA3Jioo87EWmYfDK2ptJ+Oljw2OsCcHf9z4cQZbe45aYChwLer
sIEqAwlB6v2XEdLKJP0vBQFwgdAaofdi759axTBXI0j2DQ4cM6m37seQchGboXod
ZorgCFfSgry3UiyXcwi9ExwJEiOFp87/Q8L7MOAn44yfIDEcuX6u4De7Q1pVOVrG
biqcGKBQLGUJplohVPx4FdIa+diaTPBrY7hLzvVS9aSWeQG7MqtZVPRWyzMKSPJJ
1yfBMBQ+RsyeRjsB+uMRjOZl5dcMyUbap3ejs8TukC/B
-----END CERTIFICATE-----
Generated at Wed Apr 16 21:59:46 2025 by rpki-client