Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer
File: rzrc42ZL8Of2iP9BIlUXNMTRR1Y.cer (raw, json)
Hash identifier: unD6tXMlZeQ0odY6xAA/cB2UL+Cf/5725UgucygbqDM=
Subject key identifier: AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197E575214470D40A3C1E84AB33E853CC30
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 07 Jul 2025 15:15:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213967
IP: 69.5.184.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e5:75:21:44:70:d4:0a:3c:1e:84:ab:33:e8:53:cc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 7 15:15:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af3adce3664bf0e7f688ff4122551734c4d14756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:26:67:d4:f9:e0:8b:6f:f0:48:c8:6b:15:d8:
9a:4f:a5:1d:26:4a:0a:51:ee:43:b3:95:d6:78:69:
f0:a2:0a:4d:8b:ba:c9:90:0f:c1:46:ce:92:4e:f3:
81:bf:aa:1f:51:ca:bc:92:94:0d:d3:28:3f:6f:c3:
28:43:1c:b9:fe:0e:49:bd:ce:bb:37:3c:93:7f:48:
02:33:5d:e1:d1:0d:40:d5:d9:f6:d5:cc:01:67:02:
18:1f:18:86:83:44:fd:5f:e6:62:2e:bc:8d:c0:2a:
6f:eb:fa:e5:35:89:9c:fb:96:8b:c7:08:5f:14:2e:
a6:d5:1c:26:49:a6:44:85:4f:b9:95:4d:be:96:58:
ef:a4:d0:d1:a9:72:3d:8b:43:94:e7:bf:65:9f:83:
23:b6:1b:8b:b8:68:be:b3:1f:8e:1d:b7:32:89:cb:
61:97:df:34:72:02:a7:c3:e9:de:81:ea:da:aa:71:
ae:2b:aa:a0:ab:19:1b:03:fa:d3:07:5f:87:75:24:
30:1f:e0:dc:2e:a8:3e:b0:22:e4:0b:7f:4a:a2:cc:
b2:90:ca:78:7c:70:b4:f0:0b:f5:a9:0b:a1:33:56:
03:01:e0:03:4d:16:9a:d7:f6:35:07:34:1a:20:c8:
08:08:9d:7b:67:e0:35:cf:a2:a8:aa:64:a2:b6:01:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3A:DC:E3:66:4B:F0:E7:F6:88:FF:41:22:55:17:34:C4:D1:47:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1b19d1-1dd7-4c45-bef9-335882db9a25/1/rzrc42ZL8Of2iP9BIlUXNMTRR1Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.5.184.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213967
Signature Algorithm: sha256WithRSAEncryption
29:20:45:0f:61:c5:7d:58:ea:df:2a:dd:7f:a3:7a:e5:07:31:
3c:90:47:79:9c:a1:77:5a:2e:24:91:ac:cc:d2:91:0e:7b:b2:
c0:ec:1b:0a:31:0c:dc:21:17:3f:8f:db:09:50:84:ed:3d:be:
6e:5e:9b:61:6f:4e:9f:0f:8a:bd:7f:bc:23:a8:fa:f5:62:68:
7d:88:2d:bd:e8:e8:46:c7:c3:f9:bc:52:91:b6:da:38:2c:04:
b4:fb:f6:41:ae:19:46:a2:8d:f8:c7:70:39:bb:62:24:09:94:
82:af:55:91:fc:07:d2:6a:58:3f:30:72:ab:98:5e:ea:7a:0d:
13:0e:9b:16:b3:54:19:d8:4d:16:6f:34:84:02:c0:98:4e:2a:
70:45:fa:19:60:28:ea:87:8d:9c:e6:e2:45:a3:ea:3b:8b:87:
28:e6:7f:d9:f8:74:cf:62:2e:89:f4:75:6f:86:a6:ba:e5:98:
cd:ad:bc:44:40:87:b5:77:fb:fb:42:37:7c:8e:58:4d:a0:da:
34:ee:8b:de:b7:79:26:67:7f:73:e7:38:7a:9d:d2:5c:5d:b7:
92:54:24:06:21:b3:85:8e:73:a2:7d:c2:87:9f:54:50:46:c7:
68:9a:28:68:0c:1b:9e:3a:de:08:06:e8:d0:5d:a3:8b:92:0d:
e0:6f:e0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:32:03 2025 by rpki-client