Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zn_f9IC7kN2LJtKCMJrxYEVeyws.cer
File: zn_f9IC7kN2LJtKCMJrxYEVeyws.cer (raw, json)
Hash identifier: lDsTwRDWVPlYJXqaA7pGSSKTsD3x0snKiPm3SITiekQ=
Subject key identifier: CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01963FA208F071F3DADE3EF8D3698A1DFD28
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 16 Apr 2025 17:25:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198059
IP: 81.30.96.0/24
IP: 2a10:8540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:a2:08:f0:71:f3:da:de:3e:f8:d3:69:8a:1d:fd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 16 17:25:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce7fdff480bb90dd8b26d282309af160455ecb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:63:02:55:f6:ae:e5:df:fb:f6:85:8a:28:55:
b5:20:f4:06:1e:9c:96:c1:bc:40:21:14:ed:8d:33:
18:5f:a2:7a:0e:e0:18:43:f1:c4:32:30:9b:6f:9e:
93:82:2f:d3:b6:f6:c3:a3:77:32:f5:7d:bb:68:e4:
5f:6d:10:fa:e9:5e:54:a6:c3:21:92:1c:2f:4b:ef:
89:3d:f9:47:98:a0:16:7b:f1:ca:9d:4a:ff:ac:cb:
95:00:37:32:48:16:94:d6:ab:b2:c8:57:f3:ad:85:
dd:3a:4f:be:ed:8a:3b:72:1a:4e:a5:90:c6:00:0e:
b3:e7:0a:aa:4f:75:46:5f:66:01:f0:0b:d7:d8:c8:
34:f5:ac:09:aa:1e:78:50:3e:a5:65:0b:11:87:53:
30:93:c3:af:b3:0b:30:56:25:97:7a:6a:8a:dd:b0:
df:d3:53:99:bc:3e:68:4a:8f:d7:19:f2:47:d1:4c:
29:86:33:ed:ed:c3:39:d4:06:1d:ea:94:b4:45:40:
db:64:2c:75:35:ce:31:50:8c:d8:d5:a8:75:ac:80:
e4:9e:92:65:83:e6:ac:f5:04:58:91:ee:c1:fe:b9:
99:27:1c:07:7a:57:b9:c2:16:2c:9a:34:27:60:82:
01:83:e5:e8:51:7e:8e:da:39:a8:d8:d1:1a:22:7f:
54:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7F:DF:F4:80:BB:90:DD:8B:26:D2:82:30:9A:F1:60:45:5E:CB:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/5ce03b-cd2c-441a-bcec-e12d16f44153/1/zn_f9IC7kN2LJtKCMJrxYEVeyws.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.96.0/24
IPv6:
2a10:8540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198059
Signature Algorithm: sha256WithRSAEncryption
2d:0a:8a:91:42:38:42:a8:5c:08:03:76:b1:0a:d5:37:d8:9f:
2c:43:c9:e0:51:82:26:a1:78:94:66:6e:4f:41:bb:df:23:9c:
4a:75:71:89:ac:5c:ec:08:8a:13:1c:6f:fa:fd:d6:2e:e3:de:
0a:09:c0:ad:07:6a:63:33:c2:42:d8:bd:8a:b8:c5:c3:b6:9b:
f3:a4:3e:dc:2b:28:0f:a6:ba:94:1c:c6:0e:4f:52:9e:35:48:
20:59:f4:3b:ec:f8:2c:1d:1a:c8:cd:fa:8c:56:27:4e:0e:85:
52:f8:ba:0f:a8:18:cd:ff:31:33:40:df:6d:88:8c:b7:51:3f:
26:50:2c:7d:ae:e6:39:a6:e4:43:fc:a0:0b:54:90:d6:22:96:
62:e9:7f:16:f9:d3:4f:90:66:11:c2:c9:68:e6:75:3e:58:44:
d8:23:08:5b:a2:41:9e:1c:ba:c0:40:f5:44:f2:7f:9e:37:09:
bc:a6:39:7a:d6:0e:8e:2d:2c:91:37:a3:0f:86:39:ae:05:3f:
17:df:ff:3e:3e:30:5e:cc:c8:d8:cb:06:69:af:ed:a6:02:7c:
6d:84:19:28:f9:63:0e:81:68:30:b1:ea:e3:ad:32:37:1d:f0:
2a:d1:a9:38:8a:6d:67:aa:91:34:1e:6c:b9:3f:45:7a:83:b2:
cc:3d:51:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:48:15 2025 by rpki-client