Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
File: 8FIRKM9jSqavp-9S1THz_NVWKPk.cer (raw, json)
Hash identifier: HDFs3wtJx4vzDc8pr8/MnvboXGfqCMEISbcbY/GgnG8=
Subject key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01963EF4A6458D303CD0D3CED344EDB445C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 16 Apr 2025 14:15:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2.56.44.0/22
IP: 2.59.10.0/23
IP: 5.253.160.0/22
IP: 45.67.176.0/22
IP: 83.150.236.0/22
IP: 85.209.136.0/22
IP: 91.245.232.0/23
IP: 141.98.92.0/22
IP: 152.89.8.0/22
IP: 171.22.36.0/22
IP: 185.131.222.0/23
IP: 185.142.217.0 -- 185.142.218.255
IP: 185.145.114.0/24
IP: 185.221.220.0/24
IP: 185.223.57.0/24
IP: 185.240.253.0/24
IP: 188.119.88.0/22
IP: 193.168.180.0/22
IP: 193.203.37.0 -- 193.203.38.255
IP: 194.38.28.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:f4:a6:45:8d:30:3c:d0:d3:ce:d3:44:ed:b4:45:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 16 14:15:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:e5:31:94:b7:10:98:93:0d:9c:0a:5a:89:
59:86:8a:5f:65:e8:f9:d4:bc:13:75:e1:1b:8b:9f:
93:8f:cb:fd:d8:a0:20:78:67:48:3c:81:0a:ac:b4:
e1:a8:43:14:22:e3:fe:e7:4a:94:bd:35:11:d8:91:
09:6b:61:fe:d8:c1:d3:26:d1:f6:01:3f:8b:13:d4:
60:b4:b8:ab:bf:cb:2b:1c:db:cd:f3:91:f6:03:d0:
a7:10:83:73:57:c9:16:bf:9f:b6:1b:f0:1a:5a:60:
2b:d2:3a:e8:6c:f7:15:ea:48:29:9c:12:70:74:af:
e4:8e:27:69:6b:a0:39:a6:e9:af:14:2d:18:ac:1d:
2d:44:65:ab:3c:6a:ef:d0:34:3f:bf:63:29:55:f6:
eb:c5:2e:a5:1b:d4:af:a4:00:48:d4:16:fb:b0:8d:
0f:86:11:05:46:5c:b5:48:a2:47:04:e7:c6:59:18:
98:4e:98:bf:79:54:b4:15:32:04:08:85:7c:7b:d5:
96:75:2b:80:7b:3e:4b:82:a7:d4:15:cd:fa:42:17:
1b:4d:42:3a:44:cc:58:f6:95:78:f5:77:9c:06:65:
b2:8d:6d:6e:ff:9a:63:9e:1c:6d:d4:c5:1e:6c:ae:
0f:2f:29:5b:a7:8e:d1:a1:ad:93:03:dd:2b:48:03:
69:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.44.0/22
2.59.10.0/23
5.253.160.0/22
45.67.176.0/22
83.150.236.0/22
85.209.136.0/22
91.245.232.0/23
141.98.92.0/22
152.89.8.0/22
171.22.36.0/22
185.131.222.0/23
185.142.217.0-185.142.218.255
185.145.114.0/24
185.221.220.0/24
185.223.57.0/24
185.240.253.0/24
188.119.88.0/22
193.168.180.0/22
193.203.37.0-193.203.38.255
194.38.28.0/22
Signature Algorithm: sha256WithRSAEncryption
07:d5:99:3a:8b:80:de:36:04:d3:01:13:01:98:a5:56:66:81:
2e:fc:79:12:c1:64:b0:e1:10:24:a7:cd:e5:78:32:7a:3a:8e:
8f:2e:e0:b3:0a:56:44:e2:4d:d0:f8:b4:1d:52:be:18:98:ab:
01:37:6b:cc:c5:f6:ee:b5:28:a0:ff:f8:02:2f:0f:b4:b0:2b:
0b:3a:53:1a:3b:d3:3c:17:5f:e2:a7:52:d8:67:13:b1:e7:02:
e3:de:c8:80:17:0f:dc:31:b1:dd:3c:5b:d4:c6:95:fd:96:7c:
97:8d:84:c1:d1:de:87:4c:38:ca:3a:e0:93:a1:e6:af:42:11:
c6:be:f4:63:de:9a:34:3f:e6:f4:a3:b5:b0:2a:41:3e:c8:4b:
8f:ab:49:0a:67:bc:d9:29:73:1a:3d:e6:93:34:8e:3a:75:a9:
50:cf:28:8d:c7:07:f7:eb:f8:56:15:92:db:fb:d1:b2:7b:50:
04:fa:01:e1:68:6d:a0:d8:dd:db:78:bf:a9:3e:27:05:cf:10:
d7:72:ca:b6:63:c5:94:86:0c:50:77:f3:0d:29:38:32:d7:d5:
e4:a0:3e:58:fe:dd:ab:71:bb:05:0d:59:94:50:cf:32:aa:f5:
8f:8f:39:ae:c4:b8:e7:c4:5a:4b:ba:9e:3d:14:5e:ac:ce:5b:
01:34:94:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:00:33 2025 by rpki-client