Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k-DpokYd9Py54i53cLJhOgckE4g.cer
File: k-DpokYd9Py54i53cLJhOgckE4g.cer (raw, json)
Hash identifier: YEM0Ksv1Nbw883eUkE4CfzspYmshhlS4VNMVdxCVoLI=
Subject key identifier: 93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A32F9FEBDFDAB7D90528918AE7E92
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.141.104.0/24
IP: 193.141.110.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:32:f9:fe:bd:fd:ab:7d:90:52:89:18:ae:7e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93e0e9a2461df4fcb9e22e7770b2613a07241388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cc:19:e9:9a:12:22:35:28:f5:c1:bf:73:2d:
24:ac:52:24:7f:34:79:69:b2:46:4d:1a:94:fe:42:
e5:a6:dd:5a:8c:be:4f:67:98:f5:6f:2b:ab:22:31:
af:44:df:da:b1:52:e4:73:ff:e7:a0:53:47:17:da:
07:52:6b:ac:06:0c:d1:2b:09:94:18:e7:ec:d6:0a:
1b:40:cb:65:3b:69:0b:47:f7:24:d7:10:4b:f2:2e:
4b:86:89:7c:55:f5:b2:93:38:47:1e:03:c3:61:2c:
ec:a9:93:9c:85:ba:60:bc:bb:7d:65:5a:a5:4b:39:
16:fe:94:e3:95:56:d5:be:9e:41:6a:1b:bc:22:3f:
b7:a9:b0:31:0c:a7:85:8e:0f:a9:fb:eb:82:d0:7e:
cf:59:19:38:5c:3c:94:ac:0e:e3:c3:9e:e8:5e:a7:
65:83:b9:09:fa:b4:e4:70:13:e6:42:f7:e0:99:a2:
c2:d4:75:d9:ff:16:09:8a:58:5e:34:d8:c4:34:fa:
2b:b0:c3:78:3a:12:de:85:10:f3:de:96:e7:57:31:
a3:3b:f6:72:96:1a:40:70:65:77:ba:1f:e5:8f:e7:
b8:b8:b0:60:87:40:87:8d:d3:23:0e:d0:40:4b:2f:
2c:dd:ed:10:14:b9:65:b0:6d:64:ba:22:57:99:69:
df:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E0:E9:A2:46:1D:F4:FC:B9:E2:2E:77:70:B2:61:3A:07:24:13:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/41e584-9cf7-4c62-9f61-0e2e36019849/1/k-DpokYd9Py54i53cLJhOgckE4g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.104.0/24
193.141.110.0/24
Signature Algorithm: sha256WithRSAEncryption
69:5e:4b:b5:e3:0c:b8:cb:47:9f:61:95:8d:67:5b:30:34:bf:
a6:4e:10:ba:89:11:ba:78:d5:2c:43:42:8a:4d:f6:0e:43:2d:
6c:bc:e3:16:f2:81:32:ac:b4:26:b9:dc:16:c8:ee:ec:fa:58:
c8:45:28:a1:3c:3a:e3:b7:05:cd:db:c3:82:38:47:5b:13:e6:
0c:5c:3a:06:98:b5:c2:fa:29:14:96:a9:6f:48:b6:43:ec:40:
0c:aa:1f:24:40:8b:5b:29:b2:a9:d7:ce:02:4f:79:d4:10:dc:
db:cb:40:58:db:30:6c:43:73:98:f5:29:a9:48:59:9a:a3:ec:
3f:c8:af:88:8e:5b:47:01:64:2d:59:a1:2d:ce:d9:e7:2b:e2:
3f:71:ff:a2:d1:6b:d3:5e:25:d3:f7:25:39:47:5e:29:f2:ae:
40:9c:0f:02:31:2a:f4:9a:da:5f:e1:7c:18:a6:a4:c7:f6:44:
5d:09:49:56:d1:09:7b:38:b6:ba:a3:97:2c:a7:98:1f:a5:aa:
28:68:ea:36:3f:58:b5:55:6c:36:f3:a7:e4:c2:16:97:85:9e:
d3:cc:94:e9:1b:28:cc:30:ee:b0:d9:2d:eb:41:d8:8f:3f:82:
c3:60:00:0f:d7:8e:39:12:8c:84:55:6a:3b:fa:d0:50:f5:c0:
62:47:65:ca
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAZQjajL5/r39q32QUokYrn6SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0OTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2UwZTlhMjQ2MWRmNGZjYjllMjJlNzc3MGIyNjEzYTA3MjQxMzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38wZ6ZoSIjUo9cG/cy0krFIkfzR5
abJGTRqU/kLlpt1ajL5PZ5j1byurIjGvRN/asVLkc//noFNHF9oHUmusBgzRKwmU
GOfs1gobQMtlO2kLR/ck1xBL8i5Lhol8VfWykzhHHgPDYSzsqZOchbpgvLt9ZVql
SzkW/pTjlVbVvp5Bahu8Ij+3qbAxDKeFjg+p++uC0H7PWRk4XDyUrA7jw57oXqdl
g7kJ+rTkcBPmQvfgmaLC1HXZ/xYJilheNNjENPorsMN4OhLehRDz3pbnVzGjO/Zy
lhpAcGV3uh/lj+e4uLBgh0CHjdMjDtBASy8s3e0QFLllsG1kuiJXmWnfsQIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFJPg6aJGHfT8ueIud3CyYToHJBOIMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY4LzQxZTU4
NC05Y2Y3LTRjNjItOWY2MS0wZTJlMzYwMTk4NDkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvNDFlNTg0
LTljZjctNGM2Mi05ZjYxLTBlMmUzNjAxOTg0OS8xL2stRHBva1lkOVB5NTRpNTNj
TEpoT2dja0U0Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAwY1oAwQAwY1uMA0GCSqGSIb3DQEBCwUAA4IB
AQBpXku14wy4y0efYZWNZ1swNL+mThC6iRG6eNUsQ0KKTfYOQy1svOMW8oEyrLQm
udwWyO7s+ljIRSihPDrjtwXN28OCOEdbE+YMXDoGmLXC+ikUlqlvSLZD7EAMqh8k
QItbKbKp184CT3nUENzby0BY2zBsQ3OY9SmpSFmao+w/yK+IjltHAWQtWaEtztnn
K+I/cf+i0WvTXiXT9yU5R14p8q5AnA8CMSr0mtpf4XwYpqTH9kRdCUlW0Ql7OLa6
o5csp5gfpaooaOo2P1i1VWw286fkwhaXhZ7TzJTpGyjMMO6w2S3rQdiPP4LDYAAP
1445EoyEVWo7+tBQ9cBiR2XK
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:46:27 2025 by rpki-client