Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZJn3HhXA84zrolfTAwTtRL6ofFA.cer
File: ZJn3HhXA84zrolfTAwTtRL6ofFA.cer (raw, json)
Hash identifier: UUBSgWGfEs3kzOWbIngm4SmA/Yg3SN4UzgPSjM5IF8k=
Subject key identifier: 64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5EB2CDAE00412B172BC3D1AF341DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25374
IP: 93.183.128.0/18
IP: 109.199.224.0/19
IP: 185.2.208.0/22
IP: 195.24.88.0/21
IP: 195.39.212.0/23
IP: 2a02:4dc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:eb:2c:da:e0:04:12:b1:72:bc:3d:1a:f3:41:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6499f71e15c0f38ceba257d30304ed44bea87c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:2a:df:63:48:18:71:9b:01:c6:de:75:f5:
12:7c:f6:94:79:75:94:a9:2d:6d:ed:9d:f1:16:97:
44:12:7c:04:49:84:03:13:81:44:28:7d:f3:7a:3e:
e6:40:7c:68:6c:26:a3:a1:0f:0a:0d:54:1d:0c:c6:
61:8b:e8:15:d9:7c:71:26:f7:3a:bc:fb:ec:9c:bc:
eb:57:a1:29:ab:e4:f6:18:ca:66:63:b2:18:d7:2a:
f7:88:ca:dc:5e:9b:92:f2:72:8d:13:af:93:02:6a:
7b:52:32:16:5a:5f:3b:d8:47:27:82:d7:0c:40:25:
f6:2b:db:ac:e3:a7:88:2f:49:57:a5:73:67:4f:68:
9b:7d:94:ae:f1:44:97:bd:12:ff:bf:d6:94:c0:7e:
23:77:e6:ed:13:88:91:0d:e4:1f:d8:5b:61:33:58:
45:78:38:9a:e9:4c:90:a0:46:56:e3:12:c7:eb:10:
60:36:38:5c:76:a4:56:73:9d:d5:b0:f4:ed:50:60:
3b:a2:64:ac:bb:7d:78:c3:fc:53:6d:16:b1:b8:e7:
23:7c:c4:26:f0:cd:b5:bf:c3:01:96:bb:4d:71:31:
0f:22:84:1f:1f:76:02:50:d2:fa:de:bb:58:76:77:
e1:10:6a:a4:93:ac:d2:9e:b8:f7:f2:be:75:a9:e2:
ed:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:99:F7:1E:15:C0:F3:8C:EB:A2:57:D3:03:04:ED:44:BE:A8:7C:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/4f51ef-adc6-4a1c-82d7-5785b1573a69/1/ZJn3HhXA84zrolfTAwTtRL6ofFA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.128.0/18
109.199.224.0/19
185.2.208.0/22
195.24.88.0/21
195.39.212.0/23
IPv6:
2a02:4dc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25374
Signature Algorithm: sha256WithRSAEncryption
17:a8:7e:d3:e0:18:8d:91:ba:d3:7b:a4:5e:8b:f2:34:8d:85:
4c:d9:87:a3:96:49:d7:23:d5:30:3e:23:78:e6:91:bf:7c:2b:
01:1c:57:b7:e2:c6:1b:d9:d3:46:f1:3d:8e:cf:fc:97:9b:53:
95:13:98:26:24:e3:b3:81:92:49:01:43:00:37:69:3a:a4:21:
3d:c8:4e:1e:06:8d:0a:56:85:ea:95:3a:8d:aa:0e:ea:08:29:
26:cf:96:ec:ef:b6:9f:b2:af:bc:67:af:ed:ca:50:82:4d:0c:
58:7c:7f:58:30:ab:1a:99:90:6e:7c:cb:df:6f:90:a6:a6:db:
73:9a:4f:e3:8d:9d:f0:d5:65:d1:56:dd:db:42:7d:fb:60:9a:
80:bc:c5:81:b4:b6:b1:07:69:f7:18:52:92:fc:14:14:fc:f4:
3e:96:98:70:1d:68:55:36:b4:0e:e1:0c:dc:3c:77:6e:9b:74:
57:07:04:36:42:23:99:ed:a7:b0:2a:c8:c1:62:1d:3c:e7:7c:
44:bc:9c:a4:47:67:b3:13:aa:0b:a7:26:25:ff:4a:90:80:64:
8f:55:fd:89:29:12:4e:6b:84:84:a1:47:7c:f4:8d:37:62:06:
41:08:4b:85:57:46:79:7c:6d:9f:d2:a8:1f:80:13:40:e6:98:
37:12:14:47
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgISAZQg1ess2uAEErFyvD0a80HbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDk5ZjcxZTE1YzBmMzhjZWJhMjU3ZDMwMzA0ZWQ0NGJlYTg3YzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZEq32NIGHGbAcbedfUSfPaUeXWU
qS1t7Z3xFpdEEnwESYQDE4FEKH3zej7mQHxobCajoQ8KDVQdDMZhi+gV2XxxJvc6
vPvsnLzrV6Epq+T2GMpmY7IY1yr3iMrcXpuS8nKNE6+TAmp7UjIWWl872EcngtcM
QCX2K9us46eIL0lXpXNnT2ibfZSu8USXvRL/v9aUwH4jd+btE4iRDeQf2FthM1hF
eDia6UyQoEZW4xLH6xBgNjhcdqRWc53VsPTtUGA7omSsu314w/xTbRaxuOcjfMQm
8M21v8MBlrtNcTEPIoQfH3YCUNL63rtYdnfhEGqkk6zSnrj38r51qeLt1wIDAQAB
o4ICxjCCAsIwHQYDVR0OBBYEFGSZ9x4VwPOM66JX0wME7US+qHxQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzRmNTFl
Zi1hZGM2LTRhMWMtODJkNy01Nzg1YjE1NzNhNjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvNGY1MWVm
LWFkYzYtNGExYy04MmQ3LTU3ODViMTU3M2E2OS8xL1pKbjNIaFhBODR6cm9sZlRB
d1R0Ukw2b2ZGQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQGXbeAAwQFbcfgAwQCuQLQAwQDwxhYAwQBwyfU
MA0EAgACMAcDBQMqAk3AMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmMeMA0GCSqG
SIb3DQEBCwUAA4IBAQAXqH7T4BiNkbrTe6Rei/I0jYVM2YejlknXI9UwPiN45pG/
fCsBHFe34sYb2dNG8T2Oz/yXm1OVE5gmJOOzgZJJAUMAN2k6pCE9yE4eBo0KVoXq
lTqNqg7qCCkmz5bs77afsq+8Z6/tylCCTQxYfH9YMKsamZBufMvfb5Cmpttzmk/j
jZ3w1WXRVt3bQn37YJqAvMWBtLaxB2n3GFKS/BQU/PQ+lphwHWhVNrQO4QzcPHdu
m3RXBwQ2QiOZ7aewKsjBYh0853xEvJykR2ezE6oLpyYl/0qQgGSPVf2JKRJOa4SE
oUd89I03YgZBCEuFV0Z5fG2f0qgfgBNA5pg3EhRH
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:15 2025 by rpki-client