Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
File: ZbfWaZg1v-moCB38EU3xv20hXac.cer (raw, json)
Hash identifier: 5vbrqBBzh5jTKxxqPKKtUysy7DXjEET+5JlcmfGs+aM=
Subject key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196D32D7F1FF8D225ED76417174D987B131
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 May 2025 09:01:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.9.208.0/22
IP: 195.216.160.0/19
IP: 213.182.192.0/19
IP: 2a05:9c40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d3:2d:7f:1f:f8:d2:25:ed:76:41:71:74:d9:87:b1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 15 09:01:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:15:d6:4b:b4:d8:10:52:ae:32:e6:56:22:
a5:da:87:35:7f:63:1c:50:eb:64:b7:0f:8b:db:7b:
cb:6e:d9:fa:2b:61:43:49:ae:5f:6d:0d:4a:6f:22:
40:51:45:fd:71:8e:7b:50:d9:45:a3:91:16:8b:8c:
88:ec:5f:1a:0a:9d:cc:c1:bf:ee:61:18:bf:88:cb:
0b:5c:6d:43:82:4d:2a:eb:e5:74:a2:ba:a4:0f:9d:
da:cf:2a:0f:d8:b1:a0:6e:bd:1b:c3:7a:fb:0f:83:
4f:e6:12:64:00:7d:eb:28:82:de:d7:e1:90:da:61:
87:1d:55:47:92:20:fb:f1:df:28:2a:ea:4d:e2:d6:
ca:73:3e:5f:20:d2:bb:25:e8:f0:cb:16:57:d4:d9:
e9:dc:f2:19:70:61:cf:82:65:c8:2c:95:a8:13:88:
c4:00:b9:a9:ab:5e:6a:6f:75:2a:d6:c3:cc:37:45:
8e:30:7f:e5:1e:b7:1a:bd:af:60:b5:2b:db:0e:9d:
e6:94:3f:f1:21:03:90:80:99:b4:f5:d7:0a:e1:5a:
6e:f4:40:3f:f1:ac:26:0a:64:40:4e:40:06:ab:81:
e2:53:93:2b:bb:6f:75:4f:c9:8d:21:64:e7:f8:99:
25:2e:88:81:21:f9:f1:08:e3:30:df:51:d9:4a:db:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.208.0/22
195.216.160.0/19
213.182.192.0/19
IPv6:
2a05:9c40::/29
Signature Algorithm: sha256WithRSAEncryption
91:75:2e:bf:9b:65:4f:63:4c:35:71:71:e4:ac:84:c9:28:cc:
78:cf:82:d1:f0:ba:b5:73:87:f2:75:69:c7:e8:46:5c:d0:b1:
f2:ff:20:89:e6:f1:3e:e5:04:24:94:31:f4:35:92:9b:27:55:
1d:1f:38:46:63:8e:1e:42:e2:59:4e:eb:40:67:a1:d6:0b:74:
9a:b6:d2:c6:ce:8e:3c:b9:6a:71:89:08:5f:94:fc:8f:6e:b0:
70:6c:42:c2:3c:17:8b:fe:ca:fe:4a:bc:95:f4:b0:d5:73:fc:
83:4e:e0:25:c4:81:8a:2b:01:4b:05:7d:7e:7c:15:1b:c5:78:
0f:e4:7f:71:1d:37:3b:4c:a6:6b:78:13:a2:0a:52:a9:03:bc:
96:34:27:ec:ee:53:cf:d3:07:20:19:d4:7e:88:89:01:c7:12:
dd:73:07:b3:3f:4c:4d:1e:d2:f7:61:8b:10:bc:1a:40:93:98:
65:9d:eb:ac:7b:aa:7b:d0:c7:d5:92:e3:8b:97:d1:ed:12:4a:
e4:3f:39:85:1a:50:56:6f:d3:2d:71:67:89:05:bc:49:dc:e1:
06:d5:90:16:e6:b9:bb:58:e1:dd:d4:7a:fa:06:58:75:bc:e8:
0f:49:e3:7d:06:0d:d9:ca:79:39:f7:86:64:93:96:f0:6f:75:
20:1a:13:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:12:05 2025 by rpki-client