Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZeqT2IogLVHTTSqQNZfna48X8Oo.cer
File: ZeqT2IogLVHTTSqQNZfna48X8Oo.cer (raw, json)
Hash identifier: 2Z6P120uswwRvCtg44o3BZ210TPlUjzWXKVMQrnFgeA=
Subject key identifier: 65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01981209A841CE800099E2650041161C2DF8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 16 Jul 2025 07:01:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 213.165.32.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:12:09:a8:41:ce:80:00:99:e2:65:00:41:16:1c:2d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 16 07:01:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65ea93d88a202d51d34d2a903597e76b8f17f0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:4c:be:c2:8d:45:8c:56:1c:39:e3:e7:16:
71:3e:7c:13:a1:0a:dc:e3:bb:08:7a:17:70:6b:c3:
41:6d:89:43:76:1e:c8:3c:f1:51:a4:fa:44:6d:9d:
38:7b:42:fa:d5:51:16:d0:01:6a:11:0d:46:0c:81:
5b:9d:71:db:1a:72:46:6f:31:88:ec:bd:20:13:d0:
bc:df:6e:30:05:87:e5:33:71:e6:f1:64:4e:2b:b8:
61:9b:c7:9d:a8:3e:bb:2c:e4:cc:34:79:f7:e9:32:
5c:3b:8e:87:e4:a0:af:d4:39:cb:af:aa:68:a6:47:
f0:27:45:66:c4:6b:66:e0:d8:ea:7c:bd:dd:9a:2d:
d3:96:8d:52:fe:f1:62:68:b5:88:fe:f1:95:7d:ae:
2f:bc:9b:c5:f9:09:37:9c:1d:ab:2d:81:27:cb:af:
5b:f2:c7:78:6b:5e:40:7d:1f:98:eb:5b:c2:d4:af:
81:f2:f4:8f:ff:69:05:1f:9a:58:b0:24:9d:40:38:
80:35:35:b2:1d:2d:a4:f4:ad:88:55:d8:6b:37:32:
cf:3f:1f:08:c4:b8:a3:09:61:49:35:84:aa:82:92:
07:78:cc:55:9d:61:91:96:22:c7:e3:9e:b7:da:3f:
3f:dd:42:cf:a4:60:18:62:14:c5:35:ad:57:5c:e3:
3b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EA:93:D8:8A:20:2D:51:D3:4D:2A:90:35:97:E7:6B:8F:17:F0:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54eac0-71fd-46e9-9e1b-ce1bba691b37/1/ZeqT2IogLVHTTSqQNZfna48X8Oo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.165.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:46:2f:73:c8:32:32:7b:29:4a:77:d9:4e:7f:fa:79:1a:a5:
7b:05:12:9a:b5:cd:b1:d6:a4:b8:c0:b1:35:9b:c0:1b:c4:d2:
8b:4e:7f:4c:74:5d:2e:49:3d:e8:5b:fa:b1:8e:55:d5:75:fb:
54:23:3c:62:b4:02:14:0d:65:b7:e1:94:66:7e:64:8d:3a:1e:
e6:30:e8:2d:45:a2:3c:2a:12:4e:df:4e:69:b5:85:f8:99:2a:
24:8b:88:1d:73:45:87:51:a0:d1:30:1a:a0:f8:6d:2f:2d:b7:
1f:42:6a:db:fb:c8:f4:ab:51:e2:f0:93:3c:f9:53:25:50:c3:
85:fe:0a:15:bd:58:00:a8:4f:7a:75:6e:01:fc:d6:6f:a5:27:
59:b4:9e:35:34:7b:bb:6e:39:e1:07:7e:bf:92:42:79:ca:ca:
f4:8e:d2:c7:85:de:4a:51:30:7d:5d:b8:be:3b:4b:f0:ae:91:
fe:c7:da:2c:fd:c5:95:ef:3a:45:12:47:c8:17:a1:8c:50:77:
46:21:7b:ca:72:c4:e6:26:6b:02:12:22:0b:d3:cc:51:bd:b0:
63:c3:3a:8e:99:46:bf:81:9a:69:1d:42:a5:d8:d4:ab:f9:a8:
db:62:aa:15:a0:20:df:87:e1:7d:9d:9f:47:74:32:63:82:e0:
6d:38:cd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:06 2025 by rpki-client