Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer
File: Cyzn_S9bG3l1fIlzrj97C-aGOFs.cer (raw, json)
Hash identifier: nrPcB4ityUPop640uZirIlTLCHuWHj53toVyeU4VhGA=
Subject key identifier: 0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747FFCD32AE3E5000FCF275ABF16E62
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202921
IP: 147.161.24.0/22
IP: 185.148.212.0/22
IP: 212.69.128.0/22
IP: 2a0d:f780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ff:cd:32:ae:3e:50:00:fc:f2:75:ab:f1:6e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b2ce7fd2f5b1b79757c8973ae3f7b0be686385b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c8:b5:bd:1f:69:f3:2e:13:fb:08:0b:fe:16:
8b:bb:51:91:8f:07:7e:82:d0:5d:fe:30:ab:30:15:
57:6d:5b:93:d9:4d:9d:9c:a1:2b:7b:02:5b:6d:46:
11:13:ab:f7:ec:e9:ff:8e:d9:02:5e:32:b6:99:13:
60:9f:00:ed:0d:2a:13:26:ba:bf:8c:85:e6:bc:54:
f8:47:2c:eb:47:44:7a:91:39:f2:fc:db:b0:c0:36:
db:e7:1b:78:c5:f7:57:7d:26:80:f0:e1:fe:2c:ec:
ca:07:57:7e:59:79:a4:dc:31:ff:ec:5e:73:42:fb:
ca:50:f6:3d:a4:ea:1d:a9:e9:da:21:d2:33:e1:ef:
b5:72:61:02:40:b0:53:ec:92:6a:57:3a:c3:0b:2b:
9a:66:59:cd:7f:5f:29:bd:69:91:a7:af:07:8b:e4:
7a:8f:e3:af:f5:63:56:aa:b1:07:75:f4:92:95:44:
13:cd:b6:f4:d3:6a:8d:fd:cc:a7:e2:25:91:4f:70:
5b:62:40:55:02:bc:b7:63:ae:4f:9d:b0:77:01:b2:
35:c6:95:d6:b5:f6:88:cb:de:be:0b:9c:5b:30:13:
c4:77:bc:9f:73:5d:23:30:ad:27:eb:3f:8a:fd:34:
be:de:b5:05:24:f6:a8:b6:ca:da:28:d3:b7:75:eb:
3f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2C:E7:FD:2F:5B:1B:79:75:7C:89:73:AE:3F:7B:0B:E6:86:38:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9aaf24-5346-4480-bbf3-a6410919e898/1/Cyzn_S9bG3l1fIlzrj97C-aGOFs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.24.0/22
185.148.212.0/22
212.69.128.0/22
IPv6:
2a0d:f780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202921
Signature Algorithm: sha256WithRSAEncryption
17:ab:0b:81:35:fb:ff:46:94:af:9c:f3:b7:66:ec:b3:7e:53:
99:35:62:62:fa:7d:c7:cc:02:a5:da:a9:37:a3:4f:7c:91:b6:
fe:61:e0:0a:20:52:2a:d4:48:b9:74:f6:5b:3d:b7:23:10:04:
61:82:8e:fd:4b:ca:f6:8e:3d:ab:37:6e:c5:9d:1c:d7:7f:3e:
5d:48:20:f3:4e:3b:11:6a:59:c7:80:43:10:a4:d4:38:39:65:
cd:cd:b1:80:a8:42:d6:11:59:66:26:df:24:c8:d0:9e:83:f4:
37:3a:0d:9e:3f:08:14:82:fc:76:65:66:20:04:da:26:a2:bf:
99:0c:06:61:5d:41:43:e7:16:01:0a:c0:eb:6c:1d:0d:80:a4:
8f:a7:af:ad:00:0f:b6:ba:8e:46:24:ac:9a:16:7c:79:3e:8b:
f8:ef:5d:0e:67:00:08:fc:5c:0e:1c:3b:0d:95:75:43:57:f3:
74:7a:1d:7e:9e:e8:64:c3:13:06:4a:94:58:19:de:0e:40:0b:
9a:19:79:9f:ee:2b:78:09:23:5b:77:d4:a9:ee:cb:8a:0c:07:
62:b5:51:ca:5b:fe:0b:bd:f9:24:e8:d8:ec:9a:d0:97:38:2e:
2c:fc:21:4f:ea:bb:b1:37:ed:4d:db:c4:61:81:0d:e7:50:88:
87:17:52:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 04:59:33 2025 by rpki-client