Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer
File: ZdCTIXKqLRx3xLuYNwqrPeasNFc.cer (raw, json)
Hash identifier: 6YtxIgfJuHcMwWUXzZdeEdtrjMwOhOAPv5spx6J7ln8=
Subject key identifier: 65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196F74EE8999E66589402A6740DDA6F84A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 22 May 2025 09:24:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212027
AS: 215413
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f7:4e:e8:99:9e:66:58:94:02:a6:74:0d:da:6f:84:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 22 09:24:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=65d0932172aa2d1c77c4bb98370aab3de6ac3457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:be:9d:0b:0b:d6:45:91:09:25:6a:2f:4a:
4c:47:26:dd:22:b8:30:8e:75:de:9d:67:d2:0e:e1:
39:be:c7:d7:a4:b0:7c:77:04:29:3b:cf:1a:63:26:
70:ca:af:21:0c:a5:25:1f:fc:1d:fb:07:76:9f:9a:
6c:b6:9c:cd:1b:9e:1f:e2:8a:ab:e8:6d:b0:aa:47:
2a:b1:40:42:39:ee:10:3e:64:a8:5f:cd:ad:1a:ba:
27:ed:53:de:30:a9:18:67:6b:0e:db:0e:a2:30:96:
82:28:cf:0d:83:76:db:30:02:fe:79:5d:7e:d1:60:
2b:56:e1:72:0a:ba:ac:c7:91:01:69:d5:a1:08:a0:
b8:41:c1:9d:39:8a:97:56:dd:60:c3:85:d5:92:f2:
00:5f:8b:ba:f5:e5:92:c8:5d:bf:1b:ee:9f:2d:a7:
28:33:1c:5e:ab:2a:be:2b:e5:3c:24:08:9f:62:23:
db:f9:b8:97:a6:ef:96:fd:1a:4c:35:74:ab:cf:7c:
18:a6:80:dd:e3:19:d7:4e:8a:34:e1:39:88:70:69:
e6:88:87:63:88:1b:ec:32:e6:d0:9a:f2:90:21:27:
b5:e4:37:2a:be:c9:a2:11:a1:05:15:ba:9c:be:be:
23:3a:ea:b1:c1:06:7f:f4:d7:c5:e8:16:10:08:cc:
76:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D0:93:21:72:AA:2D:1C:77:C4:BB:98:37:0A:AB:3D:E6:AC:34:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/fa7711-37ff-4aec-9853-1edde6c9d96a/1/ZdCTIXKqLRx3xLuYNwqrPeasNFc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212027
215413
Signature Algorithm: sha256WithRSAEncryption
9a:c4:f2:d9:b0:f8:5f:ec:0d:78:b3:7f:a0:46:a1:2f:3e:0b:
45:1d:18:fa:b1:9e:e7:90:7a:b4:95:86:46:46:60:10:11:8d:
6e:0f:dd:e8:6f:fd:5b:66:8a:24:aa:5d:a3:cf:76:7f:04:0d:
6a:3e:6a:c6:c3:ec:6d:1c:0c:68:97:78:b4:60:09:1b:b2:37:
73:33:46:95:62:11:ca:f1:77:c5:2c:39:50:27:51:d6:34:2f:
5e:f9:fe:40:b1:f2:1c:d8:fb:f6:30:19:39:65:41:f2:68:2a:
ad:0b:4a:95:7b:57:ac:ff:b9:a3:38:d8:0c:87:99:62:c8:1c:
e1:f5:a3:53:e5:be:4b:43:8b:c6:9c:e5:a2:b1:54:a2:4a:b8:
20:94:34:88:88:3f:6e:44:6c:16:de:2e:d2:08:34:f3:44:18:
50:5b:cc:f3:43:3b:db:38:45:5f:96:4a:ab:59:2e:dc:b5:1b:
3b:8d:2e:80:16:a1:b4:ec:db:2e:ac:89:6d:aa:76:7a:43:61:
f1:14:cf:20:60:bd:cf:08:56:ef:06:7f:58:3f:76:ae:37:7f:
e8:44:d6:50:25:1a:fb:14:00:8a:35:14:3e:a6:06:b1:1a:71:
9b:70:5b:eb:7c:1f:fc:ce:09:7e:a8:96:5f:7b:67:9a:cc:d5:
cc:72:5c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:38:46 2025 by rpki-client