Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v4F9yFUt82EP_EVEGz-BRk5Incg.cer
File: v4F9yFUt82EP_EVEGz-BRk5Incg.cer (raw, json)
Hash identifier: 9EhTH1MQQrFBYDCPLgSVJPa/TQI41oN9i3o3b1YQDiQ=
Subject key identifier: BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B256450B0B6765C1193CA7EC5C4A7A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.88.54.0/23
IP: 2001:67c:21e0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:56:45:0b:0b:67:65:c1:19:3c:a7:ec:5c:4a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf817dc8552df3610ffc45441b3f81464e489dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:70:08:cf:a6:ab:c3:f1:74:01:c0:1e:da:
69:bd:4a:57:27:60:b3:66:b1:53:26:09:c0:c9:50:
64:51:a5:dc:f7:63:07:20:0f:51:b7:39:ab:ac:22:
7a:9a:28:d2:e7:43:1a:ac:88:1e:b5:cc:c7:8a:fb:
b5:39:68:ac:dd:a2:43:84:db:c2:83:41:04:96:2f:
7f:e5:52:47:dd:ff:23:31:29:ef:9d:3f:02:69:f3:
6f:35:82:48:a2:e1:81:5e:9f:d9:46:67:51:d3:53:
cf:d2:1c:44:d3:f0:85:ae:02:b2:c5:39:56:20:a7:
3a:01:ad:36:83:dd:1c:cf:7f:d1:6f:ca:7a:48:18:
3f:4e:72:3c:44:ea:97:5d:25:4b:86:20:3e:cb:19:
96:28:54:d6:f1:c5:cb:17:5f:66:9d:0c:c7:0d:8a:
c1:ca:13:45:d9:24:f0:be:24:8e:3d:e6:40:72:47:
be:03:ac:1f:0a:73:69:d5:0c:65:14:31:af:7a:ff:
e7:84:08:b4:60:a2:5e:51:8c:a9:75:c2:f5:4c:4f:
a9:55:cf:55:bb:ac:e3:9b:e9:4e:71:47:e9:38:b5:
ef:48:d3:c3:79:d0:2b:cb:39:a2:f3:c7:16:6b:ff:
e3:f5:6e:49:7c:03:34:e6:88:89:83:46:b0:fc:e8:
42:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:81:7D:C8:55:2D:F3:61:0F:FC:45:44:1B:3F:81:46:4E:48:9D:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c4e7e9-f6be-41a3-a459-195389330edf/1/v4F9yFUt82EP_EVEGz-BRk5Incg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.54.0/23
IPv6:
2001:67c:21e0::/48
Signature Algorithm: sha256WithRSAEncryption
59:63:70:8d:9c:91:d7:1e:47:87:50:41:81:67:cc:0d:c1:09:
6c:7b:6d:80:09:e7:a7:2b:1e:4a:39:f8:17:69:07:88:06:b3:
14:54:9a:d6:69:7d:c6:5b:d8:c3:83:9a:ed:91:50:76:26:5a:
d2:55:43:7d:2f:ff:21:a6:de:39:10:81:83:aa:e1:09:74:08:
a2:82:f5:82:30:c3:0b:bb:6e:a6:13:fc:c7:87:f8:c1:3c:22:
d2:cd:03:d5:20:89:06:90:18:81:62:65:44:64:8a:af:d0:f5:
e2:93:92:20:6f:ec:ee:71:42:b0:5d:46:83:2d:b3:e4:4b:dd:
c6:df:43:20:3b:f4:39:a8:f1:5f:3f:06:0c:44:8c:9f:83:d1:
5d:c9:6a:70:23:8f:ae:79:3a:e0:4d:b0:83:b0:af:ba:e1:bd:
e6:4f:4f:f6:42:ca:73:77:1f:bc:f4:dd:60:74:61:4f:8b:f5:
e3:af:33:77:06:e2:f2:fd:16:87:44:54:25:f8:84:25:37:28:
76:77:d3:41:a0:e7:a7:e7:4e:9c:6a:65:4c:d1:53:d4:ed:e7:
19:dd:a7:8d:fb:53:98:5d:e2:3e:93:68:a8:8a:e3:6c:9f:85:
0d:d9:54:68:4e:f2:a7:7b:08:7b:c4:09:4c:b0:cb:74:10:9c:
0f:71:3f:89
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAZQhslZFCwtnZcEZPKfsXEp6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjgxN2RjODU1MmRmMzYxMGZmYzQ1NDQxYjNmODE0NjRlNDg5ZGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbBwCM+mq8PxdAHAHtppvUpXJ2Cz
ZrFTJgnAyVBkUaXc92MHIA9RtzmrrCJ6mijS50MarIgetczHivu1OWis3aJDhNvC
g0EEli9/5VJH3f8jMSnvnT8CafNvNYJIouGBXp/ZRmdR01PP0hxE0/CFrgKyxTlW
IKc6Aa02g90cz3/Rb8p6SBg/TnI8ROqXXSVLhiA+yxmWKFTW8cXLF19mnQzHDYrB
yhNF2STwviSOPeZAcke+A6wfCnNp1QxlFDGvev/nhAi0YKJeUYypdcL1TE+pVc9V
u6zjm+lOcUfpOLXvSNPDedAryzmi88cWa//j9W5JfAM05oiJg0aw/OhCjQIDAQAB
o4IClTCCApEwHQYDVR0OBBYEFL+BfchVLfNhD/xFRBs/gUZOSJ3IMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk2L2M0ZTdl
OS1mNmJlLTQxYTMtYTQ1OS0xOTUzODkzMzBlZGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTYvYzRlN2U5
LWY2YmUtNDFhMy1hNDU5LTE5NTM4OTMzMGVkZi8xL3Y0Rjl5RlV0ODJFUF9FVkVH
ei1CUms1SW5jZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQBw1g2MA8EAgACMAkDBwAgAQZ8IeAwDQYJKoZI
hvcNAQELBQADggEBAFljcI2ckdceR4dQQYFnzA3BCWx7bYAJ56crHko5+BdpB4gG
sxRUmtZpfcZb2MODmu2RUHYmWtJVQ30v/yGm3jkQgYOq4Ql0CKKC9YIwwwu7bqYT
/MeH+ME8ItLNA9UgiQaQGIFiZURkiq/Q9eKTkiBv7O5xQrBdRoMts+RL3cbfQyA7
9Dmo8V8/BgxEjJ+D0V3JanAjj655OuBNsIOwr7rhveZPT/ZCynN3H7z03WB0YU+L
9eOvM3cG4vL9FodEVCX4hCU3KHZ300Gg56fnTpxqZUzRU9Tt5xndp437U5hd4j6T
aKiK42yfhQ3ZVGhO8qd7CHvECUywy3QQnA9xP4k=
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:51:12 2025 by rpki-client