Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
File: sVyi9obU5ISnfDTBc0dr9p0je30.cer (raw, json)
Hash identifier: gDjkL9LAFYFu8cZIPeQC6qRND8e8GV7BDlVw+NajmLA=
Subject key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425220D5CD4AD3B97BC1D8F12C21DCF27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 94.124.120.0/21
IP: 2a02:9e0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0d:5c:d4:ad:3b:97:bc:1d:8f:12:c2:1d:cf:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:a1:5d:61:8c:5e:8c:25:14:78:73:f7:c0:
1f:14:09:cd:01:7b:4f:ae:53:07:4c:f1:a8:f9:59:
31:c6:8e:7c:e1:cb:46:eb:0d:b0:21:6c:db:ee:27:
a5:87:45:07:f9:e8:52:87:bf:e7:af:33:ce:91:22:
b5:9d:fd:54:99:56:37:4f:62:6c:42:c2:85:66:9e:
46:01:dc:93:5c:7d:ae:12:8b:44:30:0f:46:10:3c:
24:86:b0:4a:34:19:94:7e:83:cd:81:6a:65:ad:f4:
66:a2:c4:2c:ed:23:e0:a6:69:a2:50:ee:1e:e3:44:
4c:dc:03:3f:65:ab:cc:3a:9c:03:5e:57:03:d1:63:
fe:7d:3b:a0:75:80:de:1e:7d:d9:18:0f:3d:1b:b8:
7b:fa:7d:02:ef:68:d2:4f:51:06:8b:a1:db:39:5e:
58:13:ba:04:99:e7:ba:d3:a2:c5:34:39:a3:5e:e6:
f1:2c:ba:2b:0f:bc:01:84:d2:14:98:30:65:d8:83:
aa:90:21:20:b8:98:bc:08:10:a4:87:75:3b:b6:5c:
08:34:43:71:a8:0b:de:f9:7f:d9:0e:eb:ec:74:4b:
13:9e:b6:61:82:01:0a:e0:69:1f:58:85:8f:2a:a1:
3c:a3:00:aa:4a:ef:78:a8:3d:b5:cd:2f:7a:ce:52:
74:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.120.0/21
IPv6:
2a02:9e0::/32
Signature Algorithm: sha256WithRSAEncryption
30:04:14:c6:02:15:25:9b:50:a0:f6:87:92:61:f4:81:4c:43:
86:67:28:62:d3:b6:bc:93:11:d7:b5:cf:07:58:8a:8d:d0:d7:
2c:4f:db:84:79:71:77:e8:6c:3b:f9:6c:43:0a:fe:c6:69:33:
28:35:c2:c7:aa:ad:f9:0d:57:23:37:db:84:dd:69:21:e8:49:
0a:c9:98:4c:63:7b:42:20:3d:a2:c3:44:26:12:ff:47:f2:e0:
29:35:9a:d8:92:65:c6:9d:70:3a:8b:ef:5a:27:3b:b0:1c:42:
bf:e1:a4:2b:62:22:03:17:cb:8b:b8:8d:8a:78:d9:91:bd:5d:
a1:b0:ac:71:5b:78:21:bc:7f:83:7d:21:9e:1c:1a:af:24:28:
95:fc:60:02:26:d6:28:ba:9b:21:d2:90:87:07:0e:6f:a5:1f:
a2:1c:c7:16:72:51:51:9c:45:88:18:fe:aa:38:74:27:29:ea:
dd:60:40:b5:d1:5f:e6:58:72:bd:12:a7:af:6c:4e:22:9f:ea:
5a:53:bc:ba:ad:f6:d8:4f:42:8b:20:bc:50:f8:61:a1:1b:af:
9a:bb:d4:a5:09:c6:5c:dc:75:f3:82:11:75:eb:b7:e4:ad:22:
ce:af:fd:4a:8e:2f:a1:a7:df:60:c9:0d:61:e1:a6:e0:03:0b:
0a:f9:7f:ba
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQlIg1c1K07l7wdjxLCHc8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTVjYTJmNjg2ZDRlNDg0YTc3YzM0YzE3MzQ3NmJmNjlkMjM3YjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUGhXWGMXowlFHhz98AfFAnNAXtP
rlMHTPGo+Vkxxo584ctG6w2wIWzb7ielh0UH+ehSh7/nrzPOkSK1nf1UmVY3T2Js
QsKFZp5GAdyTXH2uEotEMA9GEDwkhrBKNBmUfoPNgWplrfRmosQs7SPgpmmiUO4e
40RM3AM/ZavMOpwDXlcD0WP+fTugdYDeHn3ZGA89G7h7+n0C72jST1EGi6HbOV5Y
E7oEmee606LFNDmjXubxLLorD7wBhNIUmDBl2IOqkCEguJi8CBCkh3U7tlwINENx
qAve+X/ZDuvsdEsTnrZhggEK4GkfWIWPKqE8owCqSu94qD21zS96zlJ0eQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFLFcovaG1OSEp3w0wXNHa/adI3t9MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI4LzE4ZGE3
ZS1kMmYwLTQ1OTctOWIzZC0zODVmM2Y1MmE5NmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvMThkYTdl
LWQyZjAtNDU5Ny05YjNkLTM4NWYzZjUyYTk2Yi8xL3NWeWk5b2JVNUlTbmZEVEJj
MGRyOXAwamUzMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDXnx4MA0EAgACMAcDBQAqAgngMA0GCSqGSIb3
DQEBCwUAA4IBAQAwBBTGAhUlm1Cg9oeSYfSBTEOGZyhi07a8kxHXtc8HWIqN0Ncs
T9uEeXF36Gw7+WxDCv7GaTMoNcLHqq35DVcjN9uE3Wkh6EkKyZhMY3tCID2iw0Qm
Ev9H8uApNZrYkmXGnXA6i+9aJzuwHEK/4aQrYiIDF8uLuI2KeNmRvV2hsKxxW3gh
vH+DfSGeHBqvJCiV/GACJtYoupsh0pCHBw5vpR+iHMcWclFRnEWIGP6qOHQnKerd
YEC10V/mWHK9EqevbE4in+paU7y6rfbYT0KLILxQ+GGhG6+au9SlCcZc3HXzghF1
67fkrSLOr/1Kji+hp99gyQ1h4abgAwsK+X+6
-----END CERTIFICATE-----
Generated at Fri Apr 18 13:47:42 2025 by rpki-client