Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer
File: ZM8e6QZTt7gU1rVFlJvZTd4PxqE.cer (raw, json)
Hash identifier: /GHXCTL12R01PomUQ00YcseoD4299L3ICyi1pUOnD/4=
Subject key identifier: 64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01955FD81509E2D4F83CE2E96D7EFB423CD5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 04 Mar 2025 06:29:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 81.90.184.0/22
IP: 2a0a:3140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5f:d8:15:09:e2:d4:f8:3c:e2:e9:6d:7e:fb:42:3c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 4 06:29:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64cf1ee90653b7b814d6b545949bd94dde0fc6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d1:57:ed:06:be:4d:b1:ba:53:7a:47:a3:36:
ee:ad:48:ca:36:40:4c:fd:e0:99:47:1d:70:a4:11:
47:63:a1:bb:a1:54:2a:2f:45:c7:1a:4c:d8:fb:23:
bf:ae:44:80:07:fd:91:78:b3:1c:a4:4b:a8:04:09:
27:c9:c1:84:51:cf:37:08:c6:29:2c:7f:13:8e:a8:
25:08:e0:e7:39:57:9f:4c:c2:9f:54:32:67:2f:88:
0a:d2:6b:01:f3:52:de:1d:14:58:57:15:45:a3:9f:
39:93:75:aa:9a:01:c0:bc:ea:54:be:35:78:04:18:
b3:04:b3:ab:0b:30:b9:07:ce:42:e2:30:96:24:91:
46:6e:87:47:5c:33:03:ad:df:f9:fd:9a:70:36:33:
29:45:d0:fe:2f:bf:f4:d3:9b:05:d2:27:3a:0f:41:
4d:b9:13:77:98:c6:2c:b6:63:c0:6c:29:a5:6b:83:
1a:d7:9a:25:d5:be:73:40:7d:24:0b:17:e4:db:bf:
3a:55:00:47:68:1d:0d:5a:be:1a:64:06:cc:f0:03:
14:aa:ea:ec:ec:f1:a3:64:82:fe:c5:8a:0b:73:f4:
a3:f5:22:45:b3:57:c6:48:ba:ec:a1:a1:04:85:4f:
49:e5:41:30:e4:c2:9b:22:e4:20:ab:0b:f1:86:ca:
ff:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CF:1E:E9:06:53:B7:B8:14:D6:B5:45:94:9B:D9:4D:DE:0F:C6:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/299caa-8ccd-49c1-9029-8804dad780a1/1/ZM8e6QZTt7gU1rVFlJvZTd4PxqE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.90.184.0/22
IPv6:
2a0a:3140::/29
Signature Algorithm: sha256WithRSAEncryption
28:0a:0f:43:8d:d8:84:3b:a5:2a:61:58:93:8e:03:d3:f7:39:
a9:88:7f:be:ed:76:ce:b7:d0:60:ec:d6:29:7c:03:e6:46:12:
10:20:e2:86:3a:96:80:8f:74:7d:fb:59:f6:68:d9:04:86:09:
df:2a:ff:36:a8:f1:12:f2:5c:89:3f:74:f2:a1:3f:b0:cb:3f:
d7:ba:95:9d:36:38:a5:9e:2f:9a:07:ca:40:06:96:95:41:c5:
51:6e:e2:69:b3:a9:15:8b:10:ce:2d:fa:17:38:c2:64:91:d4:
e7:52:a7:fd:b7:89:4c:aa:fe:e7:4f:98:79:e5:87:c8:4f:19:
eb:6a:11:3c:fb:02:5d:8a:2f:78:1f:22:12:d2:d3:fc:11:f8:
62:dd:cd:70:64:b7:f6:c9:d7:0b:d9:cc:55:37:27:9a:33:59:
0d:56:bc:51:11:5d:04:be:5c:d4:90:c4:c7:09:50:b6:1e:dd:
3a:f2:b1:78:65:19:5e:29:43:2c:5a:65:39:c7:a8:51:55:00:
eb:86:49:ad:3a:bb:5e:58:63:35:39:1f:8f:e9:92:e0:16:39:
ab:8d:71:01:b7:45:f7:3c:15:70:0f:1a:45:85:1e:65:0c:5a:
f1:29:fd:21:bd:26:2b:58:d6:86:7c:a4:76:d5:6b:9c:46:bb:
d0:f7:30:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:39:45 2025 by rpki-client