Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0zWMPscfwZpqyYRrr03lmDY1cpM.cer
File: 0zWMPscfwZpqyYRrr03lmDY1cpM.cer (raw, json)
Hash identifier: W+YLlpVKEjokXyi+xgCuvZlsmpFkm6Ixd7Qc3uOOdR8=
Subject key identifier: D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C92FA35DD999A4BA1C2517C908901
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:678:c9c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:92:fa:35:dd:99:9a:4b:a1:c2:51:7c:90:89:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3358c3ec71fc19a6ac9846baf4de59836357293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:1d:41:86:7b:d4:6b:59:df:f2:07:0f:ce:
a2:b5:de:3d:39:d8:97:7c:67:8f:4f:de:88:4a:d6:
27:a5:23:42:fe:96:26:f0:5b:2c:ed:06:ad:4e:b0:
d1:38:d0:5c:02:23:af:2f:4f:f5:15:02:26:26:a0:
da:8f:4c:5f:e2:7f:5e:0e:ec:af:d8:e9:ba:5c:90:
ba:2c:74:62:60:bc:30:86:d9:41:f3:61:c7:38:3e:
db:85:b8:aa:84:ec:26:79:a4:9e:29:73:e3:38:5f:
fb:ce:7d:b0:73:cc:b1:2a:35:0e:95:1b:94:94:bd:
89:c9:96:0d:1e:a3:7a:3e:57:95:38:a6:d8:5b:2c:
c2:cc:20:58:9b:18:19:ae:6a:35:06:b9:f0:2f:08:
e3:a9:ca:aa:4d:c8:ac:22:bb:5b:15:ed:79:f7:f4:
4b:5d:bc:56:28:b9:9f:f4:98:28:a0:dc:44:5b:ca:
88:53:68:2f:e3:c4:63:48:83:68:e8:2b:41:64:5b:
cd:4e:dc:7e:44:e4:8f:ee:3f:ed:c2:cd:d1:d8:06:
2c:38:40:87:80:24:c4:23:f2:b8:09:bf:9c:71:c8:
f9:da:7e:a1:26:6c:a6:36:b2:72:9d:d3:a0:aa:0b:
65:ad:7f:d1:ef:98:a8:a1:0d:4a:dd:3a:c7:8f:71:
7d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:35:8C:3E:C7:1F:C1:9A:6A:C9:84:6B:AF:4D:E5:98:36:35:72:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d01d58-5418-4217-89ae-23a84eedd956/1/0zWMPscfwZpqyYRrr03lmDY1cpM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c9c::/48
Signature Algorithm: sha256WithRSAEncryption
a9:a3:b6:b9:0a:83:5c:d1:78:70:67:fc:09:cd:96:b3:ab:89:
54:e1:ea:b4:ef:c1:f3:0b:a6:f8:2a:83:4d:65:f5:92:3d:08:
7f:2d:11:2e:19:59:59:11:33:ce:1c:32:e6:90:f6:19:e8:29:
dd:54:b0:32:fa:59:f6:d0:ee:19:d8:55:91:75:c6:e1:ac:be:
dc:10:a4:b1:1a:f1:63:c4:40:ce:78:84:e3:bf:ae:c1:66:e8:
b0:38:5f:5b:d1:57:44:85:ae:c4:dc:10:f8:d4:0d:60:e1:83:
f5:49:4e:b4:8c:78:58:2d:22:5b:ab:1d:12:e7:2a:d4:f5:ee:
ed:64:89:44:fc:6f:64:9e:5f:c8:ff:c9:80:21:3d:49:45:5d:
da:7f:98:67:1f:f0:65:4b:66:20:b8:f7:90:80:8f:70:33:83:
dc:4d:5b:39:32:c8:78:07:2c:fb:95:ec:ab:29:51:d1:d0:31:
e8:26:42:7d:7d:86:3f:17:78:26:8e:55:2e:e0:b8:a5:7b:d8:
81:7c:f7:0a:2b:d2:a4:89:a5:2d:a9:b6:cb:3c:f6:54:7f:71:
b1:bf:f2:e4:7a:77:5f:22:eb:69:c4:0a:b3:02:fa:a4:02:17:
0b:12:b5:89:89:72:ce:a7:5f:01:10:74:1f:2d:f0:bc:13:b2:
1f:e9:c4:85
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAZQfjJL6Nd2ZmkuhwlF8kIkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzM1OGMzZWM3MWZjMTlhNmFjOTg0NmJhZjRkZTU5ODM2MzU3MjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrMdQYZ71GtZ3/IHD86itd49OdiX
fGePT96IStYnpSNC/pYm8Fss7QatTrDRONBcAiOvL0/1FQImJqDaj0xf4n9eDuyv
2Om6XJC6LHRiYLwwhtlB82HHOD7bhbiqhOwmeaSeKXPjOF/7zn2wc8yxKjUOlRuU
lL2JyZYNHqN6PleVOKbYWyzCzCBYmxgZrmo1BrnwLwjjqcqqTcisIrtbFe159/RL
XbxWKLmf9JgooNxEW8qIU2gv48RjSINo6CtBZFvNTtx+ROSP7j/tws3R2AYsOECH
gCTEI/K4Cb+cccj52n6hJmymNrJyndOgqgtlrX/R75iooQ1K3TrHj3F9GQIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFNM1jD7HH8GaasmEa69N5Zg2NXKTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZhL2QwMWQ1
OC01NDE4LTQyMTctODlhZS0yM2E4NGVlZGQ5NTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvZDAxZDU4
LTU0MTgtNDIxNy04OWFlLTIzYTg0ZWVkZDk1Ni8xLzB6V01Qc2Nmd1pwcXlZUnJy
MDNsbURZMWNwTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAycMA0GCSqGSIb3DQEBCwUAA4IBAQCp
o7a5CoNc0XhwZ/wJzZazq4lU4eq078HzC6b4KoNNZfWSPQh/LREuGVlZETPOHDLm
kPYZ6CndVLAy+ln20O4Z2FWRdcbhrL7cEKSxGvFjxEDOeITjv67BZuiwOF9b0VdE
ha7E3BD41A1g4YP1SU60jHhYLSJbqx0S5yrU9e7tZIlE/G9knl/I/8mAIT1JRV3a
f5hnH/BlS2YguPeQgI9wM4PcTVs5Msh4Byz7leyrKVHR0DHoJkJ9fYY/F3gmjlUu
4Lile9iBfPcKK9KkiaUtqbbLPPZUf3Gxv/LkendfIutpxAqzAvqkAhcLErWJiXLO
p18BEHQfLfC8E7If6cSF
-----END CERTIFICATE-----
Generated at Tue Apr 15 13:50:19 2025 by rpki-client