Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer
File: zfjv0-MWboGqzxWA4vC5TaKbPbQ.cer (raw, json)
Hash identifier: QH3EXI3ItynUYl3IteeAoX3GrX+gloSCptzP0Q0rsJU=
Subject key identifier: CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019828A354E60D161641F5C90F56FA58373E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 20 Jul 2025 16:20:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 164.138.202.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:28:a3:54:e6:0d:16:16:41:f5:c9:0f:56:fa:58:37:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 20 16:20:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdf8efd3e3166e81aacf1580e2f0b94da29b3db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ea:de:27:95:03:fb:72:1d:02:13:dc:ce:86:
5b:7e:98:72:fb:37:2e:2e:49:c0:a7:a9:b8:ea:0f:
f6:84:27:ef:03:54:05:9d:4b:4c:1e:93:35:c7:90:
ec:0e:5c:78:a9:30:7e:2d:fc:67:d4:a0:ec:9f:cb:
7e:23:01:7e:07:51:67:1b:e6:14:3b:d5:ff:82:68:
aa:da:e1:b3:19:0c:2c:93:da:d1:3c:b5:36:dc:30:
d3:a6:e3:d2:fe:73:9f:47:0b:b5:40:04:eb:63:73:
e4:f4:ce:b7:c5:ba:f9:77:bc:0b:e8:1e:0f:8e:a5:
ad:57:03:4b:6e:10:9d:11:b2:04:07:e3:7d:8b:65:
c5:d2:5a:96:bf:50:32:28:a8:04:1f:1a:b4:40:ea:
07:a1:06:95:a7:de:a6:fb:3c:34:55:85:53:94:52:
5c:1e:6b:24:7a:d5:fd:dc:eb:eb:00:75:b3:a4:b0:
70:89:79:c1:c1:28:a3:37:18:8e:2a:74:83:34:e3:
aa:12:87:db:96:3a:67:ea:a2:fa:10:2e:d9:67:32:
c9:41:b2:b9:39:92:18:34:07:83:40:14:2f:41:21:
15:c8:55:47:bd:16:a7:af:b6:e8:b6:06:4d:c1:87:
2c:d1:26:f9:7a:4d:9e:b8:89:dc:57:34:4c:5a:a2:
f1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F8:EF:D3:E3:16:6E:81:AA:CF:15:80:E2:F0:B9:4D:A2:9B:3D:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/86c170-2067-40ee-8923-a03ad529997c/1/zfjv0-MWboGqzxWA4vC5TaKbPbQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.202.0/24
Signature Algorithm: sha256WithRSAEncryption
af:d2:d4:c3:5b:27:38:ba:ea:45:93:9f:d6:33:6e:4a:21:00:
f4:cf:bf:18:a9:52:56:e9:ef:f9:37:3e:57:29:f5:f2:23:75:
5e:f5:22:9c:1a:79:93:e3:eb:06:6c:76:c3:46:92:c1:5f:7c:
4a:3b:55:ba:45:c6:ce:a4:f4:68:de:49:63:06:24:5c:0e:d4:
65:2d:da:02:d5:d2:b4:b5:da:5a:29:5f:97:a1:ec:53:b7:e4:
f0:2a:46:7b:75:41:e9:4f:19:b9:8c:c8:43:8a:c6:f0:15:bc:
99:1f:93:cb:d6:24:e0:a2:81:29:79:3f:d1:d5:2f:e0:8d:2b:
5e:0f:c3:23:16:60:9b:24:bf:c8:e4:ed:3e:89:84:c4:bd:a9:
e9:cb:f1:94:76:4a:22:45:ca:28:1e:c1:22:e1:93:82:90:a7:
da:b2:83:c8:64:3e:f9:8b:56:20:64:ba:82:3e:ff:74:31:e3:
1b:cf:5b:65:d4:a9:34:00:23:c2:cb:c8:3f:6a:13:01:da:2c:
a5:f7:49:1f:73:75:5f:3c:24:dc:c7:3f:76:0b:74:d4:d9:9f:
cf:87:84:20:89:c8:d8:6c:e0:53:81:5d:c5:e9:e6:a2:24:28:
86:0f:50:1f:46:aa:c7:c2:64:c5:4a:b2:4f:37:bd:b4:b5:f0:
73:49:3e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:53:50 2025 by rpki-client