Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
File: ZbfWaZg1v-moCB38EU3xv20hXac.cer (raw, json)
Hash identifier: gJYyAzZmP09ujwMsEar+vadGh5KTBJV1hQAskaE6jRA=
Subject key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942827A9B780FB713BFE56B43D00FD4BCF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:54:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.9.208.0/22
IP: 195.216.160.0/19
IP: 213.182.192.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:a9:b7:80:fb:71:3b:fe:56:b4:3d:00:fd:4b:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:54:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:08:15:d6:4b:b4:d8:10:52:ae:32:e6:56:22:
a5:da:87:35:7f:63:1c:50:eb:64:b7:0f:8b:db:7b:
cb:6e:d9:fa:2b:61:43:49:ae:5f:6d:0d:4a:6f:22:
40:51:45:fd:71:8e:7b:50:d9:45:a3:91:16:8b:8c:
88:ec:5f:1a:0a:9d:cc:c1:bf:ee:61:18:bf:88:cb:
0b:5c:6d:43:82:4d:2a:eb:e5:74:a2:ba:a4:0f:9d:
da:cf:2a:0f:d8:b1:a0:6e:bd:1b:c3:7a:fb:0f:83:
4f:e6:12:64:00:7d:eb:28:82:de:d7:e1:90:da:61:
87:1d:55:47:92:20:fb:f1:df:28:2a:ea:4d:e2:d6:
ca:73:3e:5f:20:d2:bb:25:e8:f0:cb:16:57:d4:d9:
e9:dc:f2:19:70:61:cf:82:65:c8:2c:95:a8:13:88:
c4:00:b9:a9:ab:5e:6a:6f:75:2a:d6:c3:cc:37:45:
8e:30:7f:e5:1e:b7:1a:bd:af:60:b5:2b:db:0e:9d:
e6:94:3f:f1:21:03:90:80:99:b4:f5:d7:0a:e1:5a:
6e:f4:40:3f:f1:ac:26:0a:64:40:4e:40:06:ab:81:
e2:53:93:2b:bb:6f:75:4f:c9:8d:21:64:e7:f8:99:
25:2e:88:81:21:f9:f1:08:e3:30:df:51:d9:4a:db:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.208.0/22
195.216.160.0/19
213.182.192.0/19
Signature Algorithm: sha256WithRSAEncryption
9d:d4:39:fc:39:89:6f:c2:b4:df:41:d5:13:64:6a:10:3d:7e:
d7:e7:6d:82:7b:18:01:04:d5:f2:96:14:c5:cf:3d:94:ca:24:
62:fe:ad:63:3f:fb:17:ab:ce:db:06:6f:7c:e7:be:45:19:d7:
32:df:8c:21:1d:71:82:1e:5e:af:3b:11:7e:0b:50:e6:8c:ae:
16:00:8e:cf:46:68:b3:bf:e5:dd:b4:fc:61:78:6d:a3:73:8b:
a5:fc:e7:91:5b:91:87:ee:20:44:57:56:18:b7:2e:14:2e:a1:
66:58:1d:25:c1:aa:9d:fc:1a:83:6b:64:0f:15:6f:62:4a:96:
a7:97:64:42:9c:17:83:41:b0:d6:f6:b6:6f:41:31:b7:b7:2a:
3e:eb:a2:93:cc:38:f9:8e:73:91:75:e5:a0:0b:24:22:66:50:
25:d6:ca:03:f9:55:12:aa:41:6b:93:db:f8:c8:8f:59:6d:8e:
92:ce:97:d1:6c:36:f4:bf:67:4a:99:6e:cd:9a:21:9d:de:3c:
ca:76:38:3e:1c:9f:6a:b8:f3:0a:41:7b:0f:75:63:37:1c:1d:
5f:a1:e2:e5:e9:7b:73:31:26:1d:07:03:76:c5:d3:7a:cd:d5:
51:ef:f4:ec:10:68:b4:db:87:f3:a8:34:0a:a3:18:a7:e6:b2:
e0:72:a7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:16:48 2025 by rpki-client