Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wy7UX86pxxu-9WpTJcKXyvrpHm4.cer
File: wy7UX86pxxu-9WpTJcKXyvrpHm4.cer (raw, json)
Hash identifier: ftHDn9GvjetMgzPqmmoWC7ic20mPL/CJs30e29V1Tu8=
Subject key identifier: C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C3BAB12D39C0FF527029C65C04EDF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 129.129.0.0/16
IP: 192.33.118.0 -- 192.33.127.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3b:ab:12:d3:9c:0f:f5:27:02:9c:65:c0:4e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c32ed45fcea9c71bbef56a5325c297cafae91e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9c:d8:d0:04:1f:5c:a0:fa:30:76:11:a6:9a:
a7:71:d2:b7:28:53:1a:d1:ee:86:13:9f:1c:ca:1a:
45:6b:6c:f5:79:f6:b1:c2:72:8e:f2:69:1a:29:89:
de:d9:a1:32:53:4d:45:40:77:45:57:a8:af:01:42:
f0:8c:29:3e:b9:a2:cb:04:5f:f1:87:11:cb:71:20:
70:a2:b9:7d:67:be:7f:f8:77:9e:5c:a2:e2:0b:58:
e7:bc:d1:b8:47:a5:f8:ba:b6:c1:e0:26:dd:29:cf:
35:62:8e:05:f8:60:0f:06:1d:a3:68:18:1c:d6:6c:
70:35:23:f2:5c:af:7f:a9:77:80:01:b3:66:5d:fa:
fc:84:3b:fc:12:60:15:44:de:ca:a1:2a:59:bf:5c:
6f:71:5f:c4:78:3e:08:1b:4d:5b:53:bb:13:03:0a:
f3:7d:59:d0:19:a0:85:ee:61:4c:96:41:0f:bf:61:
ba:2b:cf:b4:a6:ef:a8:c4:d7:33:d7:9e:5e:22:c3:
11:96:3a:38:f8:99:9d:a2:8a:74:40:05:ff:88:71:
74:f5:62:e3:9f:fd:b7:25:09:51:b5:51:21:c3:05:
dc:ec:92:d4:30:98:f2:41:4c:04:8a:fc:91:42:2d:
5a:ac:a4:a9:56:03:14:9a:c5:50:64:4e:b2:e8:ee:
3a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2E:D4:5F:CE:A9:C7:1B:BE:F5:6A:53:25:C2:97:CA:FA:E9:1E:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0a6ecb-bbdf-4e99-94c3-877446e88e40/1/wy7UX86pxxu-9WpTJcKXyvrpHm4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.129.0.0/16
192.33.118.0-192.33.127.255
Signature Algorithm: sha256WithRSAEncryption
93:5b:d9:23:1f:b1:7a:b3:e1:f5:da:e1:0b:e4:67:8e:c4:75:
a9:50:21:83:4d:1a:3a:a4:5c:8e:78:14:92:bf:31:0e:ea:34:
f0:b5:6d:fe:ab:ea:07:83:1d:d0:5f:68:d7:0d:ff:49:14:a3:
d9:32:44:cb:c5:74:7b:f1:01:b4:75:5f:dc:27:b0:92:17:42:
6b:3f:57:f4:69:97:4f:9a:80:07:09:95:60:c8:6a:f4:0d:39:
e6:60:5c:a2:93:9d:ae:51:5c:d6:84:14:bb:77:85:0e:43:73:
67:1b:b4:e2:e8:1e:f6:fc:78:4c:41:a7:4c:13:6e:2e:3f:d8:
71:a9:e2:ba:6a:b4:fa:d7:ac:a9:05:18:4d:c7:45:d0:f7:c3:
16:1f:66:b2:50:ba:f6:9c:e7:2d:30:04:06:f6:a6:b0:08:c4:
c5:e4:92:8e:69:2c:c1:c9:d2:c7:1a:02:9d:19:7c:e7:39:05:
9c:48:8f:a6:df:08:6d:3e:56:a5:6e:db:55:7d:e7:13:3c:a6:
11:1f:18:15:d4:fe:62:d4:5e:e3:6c:67:bc:09:d2:c2:f5:ec:
82:ed:68:de:60:2e:a5:83:35:6f:50:73:89:a1:82:35:03:30:
28:fc:26:db:5d:89:4c:4e:42:82:59:cb:03:6a:01:ce:19:3c:
12:75:c0:e2
-----BEGIN CERTIFICATE-----
MIIFhTCCBG2gAwIBAgISAZQfjDurEtOcD/UnApxlwE7fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzJlZDQ1ZmNlYTljNzFiYmVmNTZhNTMyNWMyOTdjYWZhZTkxZTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+JzY0AQfXKD6MHYRppqncdK3KFMa
0e6GE58cyhpFa2z1efaxwnKO8mkaKYne2aEyU01FQHdFV6ivAULwjCk+uaLLBF/x
hxHLcSBworl9Z75/+HeeXKLiC1jnvNG4R6X4urbB4CbdKc81Yo4F+GAPBh2jaBgc
1mxwNSPyXK9/qXeAAbNmXfr8hDv8EmAVRN7KoSpZv1xvcV/EeD4IG01bU7sTAwrz
fVnQGaCF7mFMlkEPv2G6K8+0pu+oxNcz155eIsMRljo4+Jmdoop0QAX/iHF09WLj
n/23JQlRtVEhwwXc7JLUMJjyQUwEivyRQi1arKSpVgMUmsVQZE6y6O46BwIDAQAB
o4ICkTCCAo0wHQYDVR0OBBYEFMMu1F/OqccbvvVqUyXCl8r66R5uMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxLzBhNmVj
Yi1iYmRmLTRlOTktOTRjMy04Nzc0NDZlODhlNDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvMGE2ZWNi
LWJiZGYtNGU5OS05NGMzLTg3NzQ0NmU4OGU0MC8xL3d5N1VYODZweHh1LTlXcFRK
Y0tYeXZycEhtNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCwGCCsGAQUF
BwEHAQH/BB0wGzAZBAIAATATAwMAgYEwDAMEAcAhdgMEB8AhADANBgkqhkiG9w0B
AQsFAAOCAQEAk1vZIx+xerPh9drhC+RnjsR1qVAhg00aOqRcjngUkr8xDuo08LVt
/qvqB4Md0F9o1w3/SRSj2TJEy8V0e/EBtHVf3CewkhdCaz9X9GmXT5qABwmVYMhq
9A055mBcopOdrlFc1oQUu3eFDkNzZxu04uge9vx4TEGnTBNuLj/Ycaniumq0+tes
qQUYTcdF0PfDFh9mslC69pznLTAEBvamsAjExeSSjmkswcnSxxoCnRl85zkFnEiP
pt8IbT5WpW7bVX3nEzymER8YFdT+YtRe42xnvAnSwvXsgu1o3mAupYM1b1BziaGC
NQMwKPwm212JTE5CglnLA2oBzhk8EnXA4g==
-----END CERTIFICATE-----
Generated at Fri Apr 18 13:46:52 2025 by rpki-client