Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
File: 8EpYBH83u8BXlEu_jK2HQoeVkto.cer (raw, json)
Hash identifier: 1ou6PJu9OC9f93Z8vpvzXnDZoeBU5/BmyZS7JylGw1Q=
Subject key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196631C999D1651DA43E73A57692F46A519
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 23 Apr 2025 14:45:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 14.102.16.0/22
IP: 14.102.52.0/22
IP: 14.102.60.0/22
IP: 14.102.84.0/22
IP: 31.222.216.0/22
IP: 45.89.44.0/22
IP: 45.116.104.0/22
IP: 45.150.180.0/22
IP: 62.169.128.0/21
IP: 62.169.140.0/22
IP: 66.56.80.0/20
IP: 81.95.48.0/22
IP: 81.95.56.0/21
IP: 84.51.232.0/22
IP: 92.51.232.0/21
IP: 92.51.248.0/21
IP: 103.61.196.0/22
IP: 103.125.76.0/22
IP: 103.138.78.0/23
IP: 103.198.28.0/22
IP: 103.210.196.0/22
IP: 103.213.212.0/22
IP: 103.255.76.0/23
IP: 107.150.166.0 -- 107.150.169.255
IP: 107.150.172.0/23
IP: 110.172.180.0/22
IP: 114.69.236.0/22
IP: 118.91.180.0/22
IP: 124.198.128.0/19
IP: 155.2.176.0 -- 155.2.223.255
IP: 162.218.176.0/22
IP: 163.47.104.0/22
IP: 167.160.0.0/22
IP: 167.160.12.0/23
IP: 167.160.16.0/23
IP: 167.160.28.0/23
IP: 170.62.88.0 -- 170.62.119.255
IP: 170.62.160.0/23
IP: 170.62.176.0 -- 170.62.187.255
IP: 170.62.194.0/23
IP: 170.62.202.0/23
IP: 170.62.206.0/23
IP: 170.62.224.0 -- 170.62.247.255
IP: 185.34.108.0/22
IP: 185.145.80.0/22
IP: 185.161.110.0/23
IP: 185.192.212.0/22
IP: 185.203.148.0/22
IP: 185.212.172.0/22
IP: 185.243.140.0/22
IP: 190.106.64.0/20
IP: 192.140.220.0/22
IP: 192.253.208.0/22
IP: 193.142.58.0/23
IP: 198.55.28.0/22
IP: 202.49.92.0/22
IP: 202.49.244.0/22
IP: 202.50.124.0/22
IP: 203.188.160.0/19
IP: 212.32.48.0/22
IP: 212.32.68.0 -- 212.32.79.255
IP: 212.56.48.0/21
IP: 212.56.60.0/22
IP: 212.78.244.0 -- 212.78.251.255
IP: 212.104.144.0/22
IP: 213.254.160.0/22
IP: 213.254.172.0/22
IP: 213.254.188.0/22
IP: 2a14:4d40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:63:1c:99:9d:16:51:da:43:e7:3a:57:69:2f:46:a5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 23 14:45:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f04a58047f37bbc057944bbf8cad8742879592da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0f:da:b4:5e:6b:91:29:a3:eb:99:5d:51:b3:
f5:38:fc:b9:dd:99:28:00:ab:0f:41:ab:e3:a2:15:
a7:f4:26:55:af:7e:67:a7:a0:ad:c1:ae:d3:a8:44:
e0:73:0d:61:31:f1:e8:6d:0f:67:5c:d4:9c:58:6c:
60:03:60:b6:23:fc:b7:8e:53:d1:b5:58:ab:4d:4b:
c5:81:ba:df:72:8e:fb:f8:86:f8:6a:56:94:32:f3:
35:9b:96:de:bf:75:6f:9e:4b:eb:6c:a7:65:2f:45:
04:df:ba:6c:85:fe:81:4a:aa:64:f6:20:01:4a:02:
3c:24:bb:22:45:77:82:ef:37:9c:41:28:15:f8:e0:
cb:e8:5a:3c:e6:00:6e:91:f1:0e:1e:cd:ad:b2:0a:
56:5f:25:01:30:1f:61:77:e4:f5:f0:8d:62:16:33:
2d:05:4c:c2:a5:85:f8:cf:0b:d6:9e:2f:ad:9c:df:
ac:16:41:f3:bc:ea:96:ba:4c:de:e4:16:c8:39:0e:
ac:f1:19:3d:9a:83:8a:a6:96:4c:0b:e8:d4:ff:9e:
34:7e:1e:2d:3c:9c:a0:cc:ca:2a:e1:5e:ef:82:60:
ea:2a:d3:6a:94:cb:9a:cb:55:6d:6f:93:64:5e:e6:
18:53:4b:fd:df:3f:cd:34:00:5c:26:50:d5:cc:d8:
65:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.16.0/22
14.102.52.0/22
14.102.60.0/22
14.102.84.0/22
31.222.216.0/22
45.89.44.0/22
45.116.104.0/22
45.150.180.0/22
62.169.128.0/21
62.169.140.0/22
66.56.80.0/20
81.95.48.0/22
81.95.56.0/21
84.51.232.0/22
92.51.232.0/21
92.51.248.0/21
103.61.196.0/22
103.125.76.0/22
103.138.78.0/23
103.198.28.0/22
103.210.196.0/22
103.213.212.0/22
103.255.76.0/23
107.150.166.0-107.150.169.255
107.150.172.0/23
110.172.180.0/22
114.69.236.0/22
118.91.180.0/22
124.198.128.0/19
155.2.176.0-155.2.223.255
162.218.176.0/22
163.47.104.0/22
167.160.0.0/22
167.160.12.0/23
167.160.16.0/23
167.160.28.0/23
170.62.88.0-170.62.119.255
170.62.160.0/23
170.62.176.0-170.62.187.255
170.62.194.0/23
170.62.202.0/23
170.62.206.0/23
170.62.224.0-170.62.247.255
185.34.108.0/22
185.145.80.0/22
185.161.110.0/23
185.192.212.0/22
185.203.148.0/22
185.212.172.0/22
185.243.140.0/22
190.106.64.0/20
192.140.220.0/22
192.253.208.0/22
193.142.58.0/23
198.55.28.0/22
202.49.92.0/22
202.49.244.0/22
202.50.124.0/22
203.188.160.0/19
212.32.48.0/22
212.32.68.0-212.32.79.255
212.56.48.0/21
212.56.60.0/22
212.78.244.0-212.78.251.255
212.104.144.0/22
213.254.160.0/22
213.254.172.0/22
213.254.188.0/22
IPv6:
2a14:4d40::/29
Signature Algorithm: sha256WithRSAEncryption
73:eb:fe:d9:e7:5b:ec:00:ae:5c:c8:83:13:eb:65:cf:58:85:
39:1d:a2:b2:82:9e:26:81:94:5f:16:5e:79:19:8c:2b:a8:90:
e8:a8:51:71:f9:1f:af:04:a2:3a:cf:ef:47:ee:27:38:4d:4a:
42:d6:e8:70:6f:34:c3:ae:d9:ca:bf:4c:8c:19:92:80:28:ad:
a7:35:2f:9f:30:2f:39:58:e9:09:bd:98:1f:6f:a3:b1:e5:1c:
d8:22:a4:e1:17:3a:d7:7a:85:a5:fc:fc:9a:25:0e:88:fd:ec:
5b:45:c5:f0:7e:32:f8:1b:73:14:40:c5:6b:80:a3:43:2a:ce:
22:2b:fc:3b:47:87:ba:22:34:6a:30:52:93:c9:d9:ba:85:4f:
0c:3b:44:e1:9e:9f:3d:44:6e:4a:08:c6:1d:6e:58:3e:a3:ab:
c6:58:72:16:84:66:4b:bb:39:a5:07:8e:37:40:ac:9e:6d:83:
ef:aa:f1:73:0d:7b:e3:f8:e9:e1:c7:8b:e9:3c:9a:49:41:8b:
97:d2:36:0f:ba:43:55:6b:fe:26:53:b0:76:74:10:99:dc:e3:
d1:c4:95:07:d0:84:61:20:e8:d9:85:cd:01:92:29:fb:3c:76:
f5:78:c0:36:91:17:38:d7:36:29:a2:e0:d0:2f:dc:60:1a:c3:
12:ff:5e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:10 2025 by rpki-client