Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/itC83pWbIDJiNJG_MnmtRanKC-g.cer
File: itC83pWbIDJiNJG_MnmtRanKC-g.cer (raw, json)
Hash identifier: /FSRReVvK/UVsapWmtHAN5pOoIeDxNelEB596Bv2er4=
Subject key identifier: 8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019713B0568DB1B8547B196CD14ED3B2199E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 27 May 2025 21:40:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47813
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:13:b0:56:8d:b1:b8:54:7b:19:6c:d1:4e:d3:b2:19:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 27 21:40:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ad0bcde959b2032623491bf3279ad45a9ca0be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:47:85:7a:04:24:1a:04:81:46:67:31:63:d4:
37:ef:60:4c:99:4f:97:0c:3d:08:84:b4:e2:ff:3d:
9e:e2:51:2b:4f:8e:32:30:e5:c9:a2:71:13:23:64:
58:46:9a:6d:73:ef:5c:23:1e:1a:1c:09:45:68:d7:
d6:d7:6b:a3:03:a6:8d:1f:12:9f:70:bd:46:83:6f:
7d:0e:f8:a9:8a:8a:b8:90:f8:4c:6f:23:96:2e:20:
35:dc:7d:84:cc:2d:f5:bf:fa:fe:8d:8b:fb:bb:49:
ab:a0:21:f7:09:ec:23:79:18:b8:0b:c6:28:d0:5f:
a2:7e:37:56:9a:0c:c2:2e:d4:5b:fe:16:ff:50:0e:
6f:9d:be:13:a6:d3:75:ac:1e:c0:9a:10:b8:a7:7b:
4f:c9:e3:20:90:3e:ba:48:00:b8:4e:04:d3:4b:03:
b2:63:b7:d9:c5:78:df:b1:d4:5d:3a:6e:49:a3:d5:
28:b6:08:48:0d:f2:36:a4:99:d5:9a:e2:75:3a:92:
f9:45:13:4f:88:70:42:b3:c1:35:d6:00:aa:bf:4b:
86:cb:f3:7c:ae:90:8a:fc:01:c5:35:8f:f5:5b:fe:
f6:85:50:46:63:5a:13:51:73:bd:a4:35:01:96:04:
84:2f:19:d8:e4:c2:3d:1b:0e:4f:89:dc:30:64:60:
02:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D0:BC:DE:95:9B:20:32:62:34:91:BF:32:79:AD:45:A9:CA:0B:E8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/4d3d98-51f2-4d95-bc37-2d32426e141d/1/itC83pWbIDJiNJG_MnmtRanKC-g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47813
Signature Algorithm: sha256WithRSAEncryption
28:4d:04:98:c0:00:04:13:15:72:dd:12:4c:bb:2a:f5:90:19:
0c:46:0f:98:54:16:dc:a0:96:00:03:c0:9a:ed:bc:ca:c9:6c:
12:5f:39:61:8e:25:30:43:2d:ef:b4:d3:9e:28:c8:f7:73:ae:
42:28:aa:34:00:ed:ca:16:17:af:25:30:b5:19:1b:c8:82:f2:
33:53:d6:23:a3:e9:ff:15:95:4c:16:41:c1:08:eb:d2:4b:c5:
54:aa:12:cd:46:bc:30:c8:2d:33:8d:de:b8:6f:a0:77:af:9c:
da:29:c2:09:63:5e:ba:b4:4e:68:e9:df:40:dc:64:ba:f0:7c:
10:5d:87:b2:ad:59:6d:d6:03:49:eb:43:f6:70:a6:53:e0:a2:
a3:d5:10:1c:48:31:e9:61:31:30:84:d0:d7:53:ac:4b:0c:54:
90:0e:9a:e1:8a:11:c0:9e:eb:62:02:22:01:04:4d:8d:eb:0d:
4e:a1:16:da:05:71:8f:df:4d:81:83:d3:44:36:04:8e:02:e3:
c8:37:b0:74:ac:55:86:7c:cf:ac:57:2c:13:5d:83:ad:ed:92:
b1:b8:da:05:e1:61:f1:cb:b5:86:b9:8a:93:e4:e3:fd:2e:e5:
15:fb:a6:28:14:20:bf:a7:83:02:20:cd:c3:11:d4:bb:d7:f0:
17:96:92:39
-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgISAZcTsFaNsbhUexls0U7TshmeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNTI3MjE0MDEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWQwYmNkZTk1OWIyMDMyNjIzNDkxYmYzMjc5YWQ0NWE5Y2EwYmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkeFegQkGgSBRmcxY9Q372BMmU+X
DD0IhLTi/z2e4lErT44yMOXJonETI2RYRpptc+9cIx4aHAlFaNfW12ujA6aNHxKf
cL1Gg299Dvipioq4kPhMbyOWLiA13H2EzC31v/r+jYv7u0mroCH3CewjeRi4C8Yo
0F+ifjdWmgzCLtRb/hb/UA5vnb4TptN1rB7AmhC4p3tPyeMgkD66SAC4TgTTSwOy
Y7fZxXjfsdRdOm5Jo9UotghIDfI2pJnVmuJ1OpL5RRNPiHBCs8E11gCqv0uGy/N8
rpCK/AHFNY/1W/72hVBGY1oTUXO9pDUBlgSELxnY5MI9Gw5PidwwZGACNwIDAQAB
o4ICfzCCAnswHQYDVR0OBBYEFIrQvN6VmyAyYjSRvzJ5rUWpygvoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzRkM2Q5
OC01MWYyLTRkOTUtYmMzNy0yZDMyNDI2ZTE0MWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvNGQzZDk4
LTUxZjItNGQ5NS1iYzM3LTJkMzI0MjZlMTQxZC8xL2l0QzgzcFdiSURKaU5KR19N
bm10UmFuS0MtZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC6xTANBgkqhkiG9w0BAQsFAAOCAQEAKE0EmMAABBMV
ct0STLsq9ZAZDEYPmFQW3KCWAAPAmu28yslsEl85YY4lMEMt77TTnijI93OuQiiq
NADtyhYXryUwtRkbyILyM1PWI6Pp/xWVTBZBwQjr0kvFVKoSzUa8MMgtM43euG+g
d6+c2inCCWNeurROaOnfQNxkuvB8EF2Hsq1ZbdYDSetD9nCmU+Cio9UQHEgx6WEx
MITQ11OsSwxUkA6a4YoRwJ7rYgIiAQRNjesNTqEW2gVxj99NgYPTRDYEjgLjyDew
dKxVhnzPrFcsE12Dre2SsbjaBeFh8cu1hrmKk+Tj/S7lFfumKBQgv6eDAiDNwxHU
u9fwF5aSOQ==
-----END CERTIFICATE-----
Generated at Fri Jun 6 23:48:43 2025 by rpki-client