Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer
File: zBqfcpOIwWm6zBy6-Y4jbU6AirQ.cer (raw, json)
Hash identifier: /PNuHNykW2VMqoKyxqEN2UXJO2Hr/FwcCWYb9EMno/8=
Subject key identifier: CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01955680193C333746B3A7D1B79F20824489
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 02 Mar 2025 10:56:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205687
IP: 185.209.172.0/22
IP: 2a0b:49c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:56:80:19:3c:33:37:46:b3:a7:d1:b7:9f:20:82:44:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 2 10:56:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc1a9f729388c169bacc1cbaf98e236d4e808ab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:bc:35:0b:dd:99:f2:8e:3c:17:c9:34:ae:
41:c2:e4:3a:a3:64:9d:e0:e5:06:1d:c4:ab:2d:70:
b0:5d:df:68:90:b3:64:c3:5c:89:e3:78:62:79:e0:
98:38:18:5a:5a:c1:3d:db:7e:2b:a4:8e:57:78:23:
f0:2b:88:50:84:93:0a:e7:f1:27:23:dc:9c:9b:c4:
34:e2:23:00:53:7f:0d:a4:b2:3c:89:ba:39:15:71:
ca:52:f0:01:0b:de:b6:86:34:09:d4:57:58:39:31:
ea:e0:6d:91:44:f5:e6:9f:46:88:c6:4e:57:37:85:
2d:21:b3:d4:97:89:59:03:5b:c5:af:ea:25:d5:e0:
a0:0e:b4:10:7a:e8:ee:f5:dd:8e:ef:0a:02:d2:0f:
8b:40:27:09:15:1a:23:0c:18:c9:dd:a1:a9:47:d6:
af:80:40:c2:1e:2c:fa:bb:81:4d:a4:2f:a3:0a:7a:
2a:4f:38:37:58:4c:e8:54:8c:5a:ff:aa:30:7d:24:
41:fd:1e:45:d2:e3:09:99:4f:87:76:88:e7:bf:aa:
a7:cf:03:22:84:9a:57:2c:33:77:55:2c:82:ff:ab:
54:6e:76:85:b3:0f:4a:d9:5a:60:94:be:2f:a3:16:
db:52:cc:64:c7:83:21:a9:02:52:a3:ec:c6:59:5f:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1A:9F:72:93:88:C1:69:BA:CC:1C:BA:F9:8E:23:6D:4E:80:8A:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/871c6b-0f26-4c43-a0aa-7ffc4f40366a/1/zBqfcpOIwWm6zBy6-Y4jbU6AirQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.172.0/22
IPv6:
2a0b:49c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205687
Signature Algorithm: sha256WithRSAEncryption
7c:2b:43:ae:7a:47:7b:b0:36:72:9e:4a:c7:0a:1e:66:2c:2b:
b5:78:97:30:92:0b:89:7a:52:38:88:e1:36:78:7c:36:ad:48:
61:d4:5b:e6:d0:79:f6:8c:d7:26:57:3f:1e:12:43:0e:d5:86:
c1:41:7f:39:97:3e:b3:96:b0:4e:e5:21:f1:af:2a:2c:e3:80:
61:e5:4e:7a:a0:a5:05:3a:31:42:d9:a5:53:29:d7:74:d6:b6:
a8:df:56:4e:29:af:7a:8d:77:1e:8e:fa:e0:17:4f:3f:34:64:
0b:00:47:b9:ec:82:14:ac:0e:00:42:40:f3:b0:90:af:9a:9c:
21:91:f4:0e:2b:ff:80:c2:6a:fd:8c:df:c2:35:6d:fc:6b:76:
7f:0e:f6:c9:d8:37:6b:ed:84:70:d8:24:f8:13:7f:02:af:a7:
3b:cf:d7:32:d2:46:69:6c:08:ed:f9:6d:d1:b5:29:83:19:a1:
cb:3b:96:e8:59:d4:7a:c9:97:ee:2f:7d:b2:db:ce:88:ea:ae:
d1:52:11:e6:57:d4:4e:ac:95:19:42:6f:53:d4:f9:ed:f6:6e:
8f:b0:d1:ec:97:79:eb:fe:83:fb:21:81:3f:73:cc:42:8b:14:
2e:4c:84:6a:52:f8:df:70:0c:50:23:e3:55:ef:8c:34:4b:07:
94:f9:17:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:27 2025 by rpki-client