Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer
File: pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.cer (raw, json)
Hash identifier: Q4GszGcfMsRO2wGuNXu2GJSFtcaXVs37tziy//Quvjs=
Subject key identifier: A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942220223AEEB9A27B2347EFC2F8DFB56A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.170.152.0/24
IP: 185.170.155.0/24
IP: 185.207.132.0/24
IP: 185.207.134.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:22:3a:ee:b9:a2:7b:23:47:ef:c2:f8:df:b5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a647893fb5b348e68a66d55a28f278cbf3931df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:f3:46:98:8d:a0:78:34:4a:e0:e9:8d:fc:
7f:dc:0e:42:04:59:d0:9d:39:a7:e0:9c:04:14:f9:
ba:cd:68:df:62:2d:df:fe:80:dd:a8:d3:28:6d:17:
b2:cf:b2:9a:80:8b:ad:24:92:53:23:cf:76:2c:dd:
f5:f0:ec:10:a9:4e:3d:58:89:dd:b4:86:1e:c7:b7:
5e:b8:e7:d0:49:c9:a9:13:67:98:28:29:46:db:16:
9a:e4:e6:7c:c0:d0:47:16:de:f6:6e:11:8d:ff:dd:
96:1c:ad:33:7f:a4:ea:4a:97:25:0b:57:6f:54:b0:
8a:37:c2:e0:b9:b6:c0:50:1d:9a:b6:dd:b7:6a:f8:
ed:c0:8e:e8:1f:44:59:cc:13:9d:d0:96:9e:fd:a9:
bc:88:80:69:5d:90:fe:6c:f2:c8:34:88:c2:d2:f3:
68:05:92:c8:cb:9f:26:1e:22:06:33:6e:b1:01:85:
bd:75:6e:4d:46:4c:75:e2:55:e5:5f:f0:2e:48:d1:
59:78:f2:e2:38:b4:87:d7:f8:6c:89:e1:fe:31:7f:
17:65:10:56:5a:23:4f:28:53:0d:98:67:4b:14:36:
7e:bd:74:2c:8e:72:7c:0d:3e:d1:9a:9c:ac:66:86:
1e:5a:08:02:76:fe:c9:99:55:42:98:03:a1:0d:e9:
ce:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:47:89:3F:B5:B3:48:E6:8A:66:D5:5A:28:F2:78:CB:F3:93:1D:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/da8cb1-1bfc-43fd-a0d2-d624496ddcc8/1/pkeJP7WzSOaKZtVaKPJ4y_OTHfQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.152.0/24
185.170.155.0/24
185.207.132.0/24
185.207.134.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ee:4d:7b:9d:bc:eb:57:56:2b:c1:b3:05:bf:52:fd:86:70:
29:c1:75:2f:13:de:3b:d8:9b:2e:1a:f1:d4:8b:8b:48:e6:f8:
a2:29:2a:5f:d2:6e:c4:9c:ff:01:6f:29:6d:ea:17:64:54:5c:
77:70:85:64:5d:7c:37:60:d3:78:d1:ee:d4:fc:9e:ed:ad:3b:
d6:f9:88:9e:81:e4:6f:b2:5c:99:01:26:71:ad:b1:2e:d6:df:
0c:6f:bd:2a:7a:5f:2e:7b:65:e0:1d:8a:48:7d:91:2d:f0:dd:
3f:a8:68:a3:b9:35:b0:64:5b:94:f1:5e:6f:70:b5:47:eb:f9:
fe:e8:fd:2f:0b:29:1f:73:e1:00:58:2b:39:2a:da:55:7e:19:
66:79:5e:c6:7b:db:c6:2d:8f:46:e7:7f:ff:a8:b3:13:88:8b:
42:aa:c1:d8:62:46:12:b7:71:ab:b9:49:a0:9c:74:02:95:4c:
7c:b1:3a:72:74:91:4e:f0:70:ff:f8:37:59:1b:00:73:16:af:
eb:36:67:ae:62:97:04:e2:46:43:64:46:21:a8:97:2c:74:3a:
f3:8d:7e:ef:7e:3d:40:47:9c:04:87:92:f3:8b:aa:03:ea:e5:
a4:7c:9f:de:95:15:c8:8e:b6:c5:18:7b:13:da:6a:72:6e:53:
0e:8b:97:23
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgISAZQiICI67rmieyNH78L437VqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjQ3ODkzZmI1YjM0OGU2OGE2NmQ1NWEyOGYyNzhjYmYzOTMxZGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2HzRpiNoHg0SuDpjfx/3A5CBFnQ
nTmn4JwEFPm6zWjfYi3f/oDdqNMobReyz7KagIutJJJTI892LN318OwQqU49WInd
tIYex7deuOfQScmpE2eYKClG2xaa5OZ8wNBHFt72bhGN/92WHK0zf6TqSpclC1dv
VLCKN8LgubbAUB2att23avjtwI7oH0RZzBOd0Jae/am8iIBpXZD+bPLINIjC0vNo
BZLIy58mHiIGM26xAYW9dW5NRkx14lXlX/AuSNFZePLiOLSH1/hsieH+MX8XZRBW
WiNPKFMNmGdLFDZ+vXQsjnJ8DT7RmpysZoYeWggCdv7JmVVCmAOhDenOcQIDAQAB
o4ICljCCApIwHQYDVR0OBBYEFKZHiT+1s0jmimbVWijyeMvzkx30MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYzL2RhOGNi
MS0xYmZjLTQzZmQtYTBkMi1kNjI0NDk2ZGRjYzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjMvZGE4Y2Ix
LTFiZmMtNDNmZC1hMGQyLWQ2MjQ0OTZkZGNjOC8xL3BrZUpQN1d6U09hS1p0VmFL
UEo0eV9PVEhmUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDEGCCsGAQUF
BwEHAQH/BCIwIDAeBAIAATAYAwQAuaqYAwQAuaqbAwQAuc+EAwQAuc+GMA0GCSqG
SIb3DQEBCwUAA4IBAQB47k17nbzrV1YrwbMFv1L9hnApwXUvE9472JsuGvHUi4tI
5viiKSpf0m7EnP8Bbylt6hdkVFx3cIVkXXw3YNN40e7U/J7trTvW+YiegeRvslyZ
ASZxrbEu1t8Mb70qel8ue2XgHYpIfZEt8N0/qGijuTWwZFuU8V5vcLVH6/n+6P0v
Cykfc+EAWCs5KtpVfhlmeV7Ge9vGLY9G53//qLMTiItCqsHYYkYSt3GruUmgnHQC
lUx8sTpydJFO8HD/+DdZGwBzFq/rNmeuYpcE4kZDZEYhqJcsdDrzjX7vfj1AR5wE
h5Lzi6oD6uWkfJ/elRXIjrbFGHsT2mpyblMOi5cj
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:57:02 2025 by rpki-client