Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yd_q7KItLSYYtDPPAKsUS9i4Db0.cer
File: yd_q7KItLSYYtDPPAKsUS9i4Db0.cer (raw, json)
Hash identifier: PcgwGuWXxBA8TjbVNTrPnycRCHTqWrn2NGC4DUMiEDQ=
Subject key identifier: C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC4B5EF28989594F649216A6A47546
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.171.248.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:4b:5e:f2:89:89:59:4f:64:92:16:a6:a4:75:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9dfeaeca22d2d2618b433cf00ab144bd8b80dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:3a:48:c0:d9:a1:ff:89:09:55:62:08:ca:
aa:17:cc:62:57:26:c4:41:7a:49:5e:ff:05:51:69:
74:f8:f6:97:ce:00:0a:4c:de:72:d3:e6:3a:62:47:
45:d3:a5:4c:de:4f:11:62:a4:d8:b8:2a:39:d8:6d:
df:bf:bf:d7:65:4e:99:a8:7c:c9:8f:10:f4:4e:21:
9b:f8:f2:8a:6d:8b:c9:2f:ff:37:cb:0b:36:4b:e3:
db:b2:69:58:30:27:ed:4a:aa:a8:28:3a:7e:e6:11:
2a:5c:5d:18:2e:ca:f8:4e:3b:2a:ec:cf:a8:33:85:
3d:d1:8e:48:47:f7:d8:fe:21:ca:7f:a0:a6:a8:e1:
49:b7:c9:7a:8c:58:17:e4:77:88:2e:f3:8a:1c:a5:
35:e5:cc:de:e5:51:eb:84:03:5f:7d:5c:98:74:38:
f1:ce:57:3f:66:1d:a6:d3:bf:eb:b2:e6:4c:f5:e9:
4c:d1:a1:41:71:fd:a5:e0:80:66:1a:8d:59:03:66:
18:6a:30:c8:35:af:de:ef:84:9f:59:23:83:55:35:
65:13:e8:48:7a:13:de:b0:2c:10:ae:fc:df:fe:84:
e8:a5:b1:de:3d:58:ed:96:cf:36:28:e9:23:48:f1:
2e:b7:9d:a2:5b:89:bb:fd:c9:f1:2e:f9:6e:2b:17:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DF:EA:EC:A2:2D:2D:26:18:B4:33:CF:00:AB:14:4B:D8:B8:0D:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957b15-d5dc-43e5-809c-bc362d3768bd/1/yd_q7KItLSYYtDPPAKsUS9i4Db0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.248.0/22
Signature Algorithm: sha256WithRSAEncryption
77:5c:c5:e0:a8:24:53:47:20:4d:6e:4f:7c:7f:82:76:63:59:
e8:96:17:37:80:12:a2:4a:27:5d:78:bb:69:02:05:9b:23:57:
83:7a:ab:16:6e:cc:9f:87:9b:1f:8d:4e:55:ae:05:4f:63:15:
b1:29:b9:62:1b:c8:a3:5c:08:33:c2:72:eb:e2:d9:e7:ae:63:
b8:58:97:0d:4f:a5:0c:b2:4d:21:65:cf:5a:17:a2:de:5e:f3:
92:17:45:d3:e5:76:49:4c:db:76:0a:65:b0:e2:02:67:af:5e:
dd:a9:61:16:66:0b:13:6a:b8:ea:f9:b2:30:03:1e:ff:71:72:
33:f9:89:74:73:bb:65:6a:19:1a:8e:00:00:ba:9b:23:57:b2:
f4:ef:47:1c:55:b0:ae:a3:d5:52:c7:55:d3:7b:19:d6:a4:1a:
89:85:8d:90:67:a7:62:d1:47:79:a6:54:2f:2c:47:eb:b7:2a:
ff:ee:9d:42:de:c4:a8:fa:22:e0:04:55:b3:be:06:ee:17:47:
bc:f2:c9:fe:ff:ee:bc:dc:da:e5:a6:b5:d6:06:cd:2e:8d:cb:
3d:4d:13:2d:fa:b5:d8:50:de:07:8b:77:51:4e:82:80:ca:4b:
e1:0a:61:e7:24:6b:44:b0:de:09:f7:89:b5:bf:26:6f:09:7c:
e9:3b:81:6c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQl/Ete8omJWU9kkhampHVGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWRmZWFlY2EyMmQyZDI2MThiNDMzY2YwMGFiMTQ0YmQ4YjgwZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQE6SMDZof+JCVViCMqqF8xiVybE
QXpJXv8FUWl0+PaXzgAKTN5y0+Y6YkdF06VM3k8RYqTYuCo52G3fv7/XZU6ZqHzJ
jxD0TiGb+PKKbYvJL/83yws2S+PbsmlYMCftSqqoKDp+5hEqXF0YLsr4Tjsq7M+o
M4U90Y5IR/fY/iHKf6CmqOFJt8l6jFgX5HeILvOKHKU15cze5VHrhANffVyYdDjx
zlc/Zh2m07/rsuZM9elM0aFBcf2l4IBmGo1ZA2YYajDINa/e74SfWSODVTVlE+hI
ehPesCwQrvzf/oTopbHePVjtls82KOkjSPEut52iW4m7/cnxLvluKxcUUwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFMnf6uyiLS0mGLQzzwCrFEvYuA29MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyLzk1N2Ix
NS1kNWRjLTQzZTUtODA5Yy1iYzM2MmQzNzY4YmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvOTU3YjE1
LWQ1ZGMtNDNlNS04MDljLWJjMzYyZDM3NjhiZC8xL3lkX3E3S0l0TFNZWXREUFBB
S3NVUzlpNERiMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuav4MA0GCSqGSIb3DQEBCwUAA4IBAQB3XMXg
qCRTRyBNbk98f4J2Y1nolhc3gBKiSiddeLtpAgWbI1eDeqsWbsyfh5sfjU5VrgVP
YxWxKbliG8ijXAgzwnLr4tnnrmO4WJcNT6UMsk0hZc9aF6LeXvOSF0XT5XZJTNt2
CmWw4gJnr17dqWEWZgsTarjq+bIwAx7/cXIz+Yl0c7tlahkajgAAupsjV7L070cc
VbCuo9VSx1XTexnWpBqJhY2QZ6di0Ud5plQvLEfrtyr/7p1C3sSo+iLgBFWzvgbu
F0e88sn+/+683NrlprXWBs0ujcs9TRMt+rXYUN4Hi3dRToKAykvhCmHnJGtEsN4J
94m1vyZvCXzpO4Fs
-----END CERTIFICATE-----
Generated at Thu Apr 17 00:57:57 2025 by rpki-client