Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer
File: ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.cer (raw, json)
Hash identifier: rCLXGtvV0KUZ4Usb3AaiOZBMIwH/Xly5xOHPlDGSOnk=
Subject key identifier: 64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521ED88DFB042F31D091EF5935C6640
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209015
IP: 45.10.200.0/22
IP: 2a0e:4500::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ed:88:df:b0:42:f3:1d:09:1e:f5:93:5c:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64d864ae92bd7ceab5083bcc71101ef04676f8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c4:38:9f:88:4f:0f:ed:67:c5:e2:00:77:1f:
65:98:e8:78:b1:26:53:40:71:f9:10:b8:86:9e:fa:
b6:1e:06:55:4a:f2:06:29:76:c8:51:62:1f:88:61:
c4:dc:74:2e:96:d5:8d:dc:ff:4e:0f:4a:8c:fe:56:
fa:ec:9d:d3:a1:8a:50:af:f6:b7:80:62:08:0e:63:
55:33:f3:7c:82:49:00:d9:da:c9:90:4b:be:bf:f9:
e3:3d:f1:03:3b:23:ed:c8:0e:b6:fb:34:93:18:46:
84:c3:c1:61:b3:c8:a9:10:56:68:05:86:db:7f:8b:
c0:9d:a2:89:91:55:77:8e:1f:6d:a3:78:64:eb:30:
3e:f8:3a:44:52:a4:41:7b:1c:d8:3e:93:62:e6:ea:
22:0b:fa:e8:59:b3:88:3f:08:0e:a8:4e:94:d0:9f:
94:68:ea:47:00:e0:3c:19:02:3f:37:de:08:a0:7e:
bf:6c:77:bb:8e:e0:fd:ef:0a:4a:12:73:2b:2c:54:
df:9f:89:ba:d4:b0:0a:d9:90:b8:c4:3d:81:31:03:
49:62:5a:1f:24:67:26:9a:09:9f:b6:be:9f:e6:fe:
b5:c1:f7:9a:00:05:00:bf:90:53:0c:8d:f0:18:24:
79:0a:ff:fd:f2:b2:2a:e5:ae:ac:01:19:8b:a8:8e:
9f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D8:64:AE:92:BD:7C:EA:B5:08:3B:CC:71:10:1E:F0:46:76:F8:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/70b2c4-1d4a-4b91-b0d0-2c05cc922001/1/ZNhkrpK9fOq1CDvMcRAe8EZ2-Kw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.200.0/22
IPv6:
2a0e:4500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209015
Signature Algorithm: sha256WithRSAEncryption
0e:e7:3b:19:0c:23:64:7f:9c:76:fd:e0:dc:83:70:e4:fc:00:
f5:01:e2:c9:75:62:27:79:fe:10:91:ad:5c:62:77:26:59:bc:
e8:a8:06:d9:93:eb:6c:5b:97:87:73:2d:ae:29:82:f1:97:5d:
49:a5:08:bc:85:3d:5e:72:54:24:f0:2c:d8:60:b5:29:2d:e3:
2b:a6:37:f1:4d:97:8f:ed:b3:dc:ae:76:40:97:e3:d8:d6:28:
a3:97:2b:d4:4e:f0:87:70:b2:46:ac:a4:31:c5:75:e0:00:7e:
cf:6f:87:86:7c:b6:81:b3:b6:56:b8:dd:1e:d2:bc:c8:c6:41:
b7:6d:54:a6:9d:c0:d7:a9:8a:a1:c1:5a:a7:1f:41:20:45:8b:
ec:cd:11:e6:66:65:2d:93:e6:77:b9:22:ee:75:ca:b4:38:6e:
f3:d0:e8:6e:a0:dd:08:57:3b:4f:e5:06:61:66:56:22:f5:19:
26:27:2b:e6:5e:22:ba:d3:20:1c:b8:e7:49:a6:bb:d4:ea:8e:
ef:fa:b7:23:01:08:cf:a9:63:e6:6b:e8:79:dc:84:ec:c3:3b:
0a:03:b0:e8:6b:60:49:92:f5:e2:2e:c9:b2:00:7b:d0:b4:85:
85:4e:2d:eb:8b:6c:87:c2:3c:5f:8d:12:e3:6a:b1:b3:0a:a9:
00:b5:a0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:43:48 2025 by rpki-client