Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer
File: RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.cer (raw, json)
Hash identifier: /W8yfqZvAAuGrjp4Lm2KC9JKO0h3rLEKl83T7Tj2/WY=
Subject key identifier: 45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01964908AF97157BAAE206F99A55F272BC71
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 18 Apr 2025 13:13:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 3295 -- 3299
IP: 193.47.192.0/24
IP: 193.178.154.0/23
IP: 194.119.0.0/17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:08:af:97:15:7b:aa:e2:06:f9:9a:55:f2:72:bc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 18 13:13:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=45d34fd048b597b3e5f7da89dfe64657697e8ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:40:8d:b9:1f:0a:40:bf:5e:2d:c9:db:41:
66:11:af:6e:4b:5d:9f:72:1a:ea:00:e4:22:14:8b:
5a:86:3a:27:6c:a2:07:ea:e8:0a:47:10:b7:22:ad:
c4:69:ec:bb:1d:23:94:d6:db:23:35:ae:7a:93:e8:
f3:97:88:1a:14:5a:69:fa:71:80:4b:c7:52:52:62:
a4:b6:b8:bb:1f:a6:3c:36:db:95:55:ea:97:02:5e:
f0:81:86:32:86:ac:a2:33:58:47:bf:91:a6:01:62:
56:4b:ad:33:d1:30:e3:16:0b:3f:39:ab:62:97:2a:
db:8a:f7:50:6a:8b:1b:9f:ed:fd:97:aa:74:21:fd:
bf:9f:f6:28:a3:e7:93:48:28:e3:4f:b0:fd:85:78:
cf:e5:31:b2:c6:09:64:f7:e0:78:1f:9f:09:cd:b1:
7e:79:ea:99:b1:62:67:c2:af:b9:58:c4:8b:8e:8e:
f6:73:47:80:b1:4d:c3:58:73:7a:1b:28:b8:61:ec:
a3:f2:9b:a5:89:2d:74:fd:38:5c:60:27:74:0b:1f:
47:35:3c:83:a5:51:8d:6e:b8:04:de:b0:e5:fb:03:
04:ec:3b:4f:98:30:9f:8a:ee:d9:c3:4b:83:b1:02:
f5:9f:c1:10:0e:bf:5c:69:4d:55:21:60:3e:33:ff:
54:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D3:4F:D0:48:B5:97:B3:E5:F7:DA:89:DF:E6:46:57:69:7E:8E:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ce77b1-1c4d-47b0-a77b-843948cbfb81/1/RdNP0Ei1l7Pl99qJ3-ZGV2l-juM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.192.0/24
193.178.154.0/23
194.119.0.0/17
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3295-3299
Signature Algorithm: sha256WithRSAEncryption
00:65:04:9a:13:2e:d9:21:8e:62:ab:92:28:26:0b:e1:4e:74:
0e:02:0c:6e:00:b4:95:08:fc:85:ee:c0:31:60:ef:c0:94:da:
ff:4c:b5:6c:6a:9d:8e:fa:aa:90:90:aa:68:5b:f0:32:85:87:
08:14:38:7f:6f:ac:32:de:1b:ce:05:df:9f:1b:ad:7b:81:06:
aa:20:28:da:f4:58:52:c5:cc:ec:30:4a:06:af:79:eb:95:24:
15:2d:9a:1a:60:05:6f:a8:e2:5c:9f:84:e5:e4:e4:f1:dd:bb:
b6:f4:27:da:f4:1f:80:d6:37:3b:f3:b4:e4:42:d8:8b:50:29:
36:34:f9:1e:80:c5:9d:6d:61:c6:65:a4:81:ab:d0:ba:ad:60:
04:af:5a:e1:bf:6a:20:a8:13:1c:9e:85:e4:df:55:e4:da:9f:
9c:1f:76:13:fd:4d:fa:39:36:b6:f7:c4:89:cf:b7:b1:57:68:
aa:be:7f:d2:a5:50:a1:2f:dd:12:9c:14:74:d6:e3:51:11:6b:
20:3c:1c:53:ce:41:f3:0c:9c:09:26:39:b7:9e:bc:af:a3:40:
40:5e:63:94:12:25:34:eb:95:dc:1d:4c:b1:62:4c:63:cf:39:
ba:24:ef:46:aa:f3:bb:f9:7d:69:61:09:41:59:8b:30:c9:7c:
ca:ea:7d:bb
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZZJCK+XFXuq4gb5mlXycrxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNDE4MTMxMzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWQzNGZkMDQ4YjU5N2IzZTVmN2RhODlkZmU2NDY1NzY5N2U4ZWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofFAjbkfCkC/Xi3J20FmEa9uS12f
chrqAOQiFItahjonbKIH6ugKRxC3Iq3Eaey7HSOU1tsjNa56k+jzl4gaFFpp+nGA
S8dSUmKktri7H6Y8NtuVVeqXAl7wgYYyhqyiM1hHv5GmAWJWS60z0TDjFgs/Oati
lyrbivdQaosbn+39l6p0If2/n/Yoo+eTSCjjT7D9hXjP5TGyxglk9+B4H58JzbF+
eeqZsWJnwq+5WMSLjo72c0eAsU3DWHN6Gyi4Yeyj8puliS10/ThcYCd0Cx9HNTyD
pVGNbrgE3rDl+wME7DtPmDCfiu7Zw0uDsQL1n8EQDr9caU1VIWA+M/9UiQIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFEXTT9BItZez5ffaid/mRldpfo7jMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QwL2NlNzdi
MS0xYzRkLTQ3YjAtYTc3Yi04NDM5NDhjYmZiODEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDAvY2U3N2Ix
LTFjNGQtNDdiMC1hNzdiLTg0Mzk0OGNiZmI4MS8xL1JkTlAwRWkxbDdQbDk5cUoz
LVpHVjJsLWp1TS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsGCCsGAQUF
BwEHAQH/BBwwGjAYBAIAATASAwQAwS/AAwQBwbKaAwQHwncAMB8GCCsGAQUFBwEI
AQH/BBAwDqAMMAowCAICDN8CAgzjMA0GCSqGSIb3DQEBCwUAA4IBAQAAZQSaEy7Z
IY5iq5IoJgvhTnQOAgxuALSVCPyF7sAxYO/AlNr/TLVsap2O+qqQkKpoW/AyhYcI
FDh/b6wy3hvOBd+fG617gQaqICja9FhSxczsMEoGr3nrlSQVLZoaYAVvqOJcn4Tl
5OTx3bu29Cfa9B+A1jc787TkQtiLUCk2NPkegMWdbWHGZaSBq9C6rWAEr1rhv2og
qBMcnoXk31Xk2p+cH3YT/U36OTa298SJz7exV2iqvn/SpVChL90SnBR01uNREWsg
PBxTzkHzDJwJJjm3nryvo0BAXmOUEiU065XcHUyxYkxjzzm6JO9GqvO7+X1pYQlB
WYswyXzK6n27
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:29:03 2025 by rpki-client