Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zsyfK4Jf2WfpeMQgknlZX88zLFo.cer
File: zsyfK4Jf2WfpeMQgknlZX88zLFo.cer (raw, json)
Hash identifier: wWflLeNqOmWtwY5RLxLTeFUws5MoTNVLfiVOrDfcrMM=
Subject key identifier: CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B263D40D3DB450A48EE9213B2F5AD1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.186.88.0 -- 193.186.103.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:63:d4:0d:3d:b4:50:a4:8e:e9:21:3b:2f:5a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cecc9f2b825fd967e978c4209279595fcf332c5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f8:c3:81:34:8b:3d:f8:0f:94:61:29:51:55:
b1:06:03:0e:ff:f7:d9:65:d6:d8:cb:6e:f4:05:58:
df:4e:96:80:a0:e5:07:45:75:c1:76:c7:3a:e0:90:
77:bd:b8:18:2f:16:e8:e6:fb:03:15:43:79:b8:f7:
18:26:56:96:8c:48:cb:aa:ee:e0:23:a1:d8:1a:e6:
fb:65:18:e2:7f:9c:72:f5:99:5e:da:83:b2:2d:f0:
0b:6c:fc:6f:1e:44:65:d4:4a:d9:54:fb:5b:c9:30:
7e:b7:e4:d0:26:18:07:9c:59:21:f7:01:56:02:ef:
1c:6a:50:f4:51:cf:31:bc:d4:98:74:46:d2:2a:e0:
f7:7c:f2:e1:a3:ad:b7:28:6d:37:95:1d:e7:28:de:
35:75:c7:e7:6f:39:75:17:f9:3f:a8:f9:30:0e:db:
19:f8:b3:1c:05:a0:59:9c:e2:93:64:a2:eb:ba:e2:
70:02:16:27:47:e8:a9:fc:a8:3b:9b:30:81:97:55:
f8:b1:75:e3:92:ef:a6:b0:62:87:47:d6:49:ee:79:
b7:43:04:01:ae:32:9a:8d:2a:80:11:a5:81:a3:0f:
bb:8b:ca:1f:48:31:5a:77:bd:5f:3b:2c:dc:dc:70:
9b:be:4e:51:42:44:73:18:3d:04:a1:0f:ed:a7:59:
be:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CC:9F:2B:82:5F:D9:67:E9:78:C4:20:92:79:59:5F:CF:33:2C:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/96d0e2-184f-47e3-9bf6-55a03cb83bf6/1/zsyfK4Jf2WfpeMQgknlZX88zLFo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.88.0-193.186.103.255
Signature Algorithm: sha256WithRSAEncryption
a5:62:a9:5f:4b:b5:9d:14:1b:01:0b:4a:03:51:cb:85:ca:37:
7d:6c:b5:24:01:dc:8e:cf:fc:c9:a9:89:15:82:10:5e:87:d5:
e5:4d:f1:14:33:ed:e7:9a:72:19:24:b9:0c:ef:15:69:cb:0a:
61:92:d8:35:fe:56:d0:1b:ae:dc:17:d7:08:44:30:68:cf:b6:
c3:14:60:cf:a6:73:0d:31:4d:fb:0e:69:ae:e0:ec:99:ad:38:
e5:66:16:48:c3:9e:56:49:d8:36:93:66:08:72:bd:be:bc:de:
f0:ef:4e:e6:d8:3f:13:67:4f:c0:e7:ac:96:d9:83:bd:8b:c2:
75:b0:13:3b:2c:c5:e5:2c:53:58:b0:aa:b4:56:ef:cf:76:e7:
14:7b:da:2e:df:17:a2:36:a5:f9:c8:f6:4d:53:42:58:68:64:
77:dc:88:66:16:66:ba:02:af:bb:63:77:98:0f:b4:a7:70:5c:
99:5b:b5:e9:e6:71:bd:6a:9a:d3:98:aa:ad:ab:e9:a3:78:2f:
f2:f0:08:aa:da:76:35:88:88:be:f4:22:a7:4d:22:64:7b:59:
51:b2:e9:3c:79:28:e7:4d:a8:0b:7a:c2:2c:6e:cc:d2:52:80:
60:98:8d:86:35:93:ba:ac:46:69:9e:d5:e0:32:af:1e:5c:91:
75:42:db:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:25:30 2025 by rpki-client