Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer
File: ZgiZEzMp-qW1cWsclfuvkwIfvGE.cer (raw, json)
Hash identifier: 0UsS2WC05cddKJXvtRRbjpDTgPQbrag6hgwVl0YF1OM=
Subject key identifier: 66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D92A113C2915FF6AEBECB68A7EFAD0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201319
IP: 194.56.0.0 -- 194.56.71.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:2a:11:3c:29:15:ff:6a:eb:ec:b6:8a:7e:fa:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=660899133329faa5b5716b1c95fbaf93021fbc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:1d:c2:b5:12:32:68:b4:f5:b1:8a:76:43:
94:f4:be:02:ed:fb:56:37:c2:4d:cc:c7:ee:93:9b:
d2:90:f3:16:64:a3:3f:70:28:46:09:b7:cd:75:01:
fc:25:0d:ae:d3:ab:81:d6:dc:8d:c6:b9:af:df:f1:
68:7e:ce:fd:4b:e6:d1:15:13:10:14:83:c1:7e:58:
d8:6a:6c:52:aa:5d:b9:f2:8c:81:63:4c:b8:3d:64:
b8:5d:d0:6d:6f:19:65:16:94:9e:6a:0e:c0:17:51:
29:0f:22:a1:c7:9b:c5:cf:ed:21:95:5e:e7:bf:6e:
56:62:09:ec:1e:8f:63:37:2f:9d:ec:bb:8f:9e:99:
c0:63:00:37:86:89:8a:6d:ca:b8:d6:8e:ac:27:be:
6c:69:3a:c0:81:f1:e0:b3:3e:de:5b:b8:c7:9c:06:
78:9d:61:eb:9b:31:73:b9:5a:a3:3f:fd:b6:9b:30:
ba:8f:c7:1f:d7:bf:d9:f9:22:1c:99:88:23:3b:78:
18:8c:28:83:bd:0c:4a:fb:11:da:52:68:d7:32:cc:
82:e7:24:a4:43:6c:c5:3d:a7:16:a8:6c:01:c9:3c:
2c:a1:cf:ea:28:04:4a:29:20:9f:ff:e1:87:ef:15:
24:4e:bc:2c:8e:9d:2d:ba:3b:15:d1:cf:d8:e7:8a:
69:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:08:99:13:33:29:FA:A5:B5:71:6B:1C:95:FB:AF:93:02:1F:BC:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/bd75b1-174b-417c-8750-eb8a453bc56e/1/ZgiZEzMp-qW1cWsclfuvkwIfvGE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.0.0-194.56.71.255
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201319
Signature Algorithm: sha256WithRSAEncryption
21:a3:f5:6d:7f:2f:47:57:e8:0e:1f:7f:2d:0d:61:95:84:15:
c3:98:50:9f:05:cc:dc:3a:87:93:db:94:4b:61:16:8c:df:c8:
f4:96:a2:a5:7e:e5:cc:74:96:4f:d9:c9:1f:9f:85:a0:65:31:
d1:42:d7:4f:32:7f:ad:5c:1a:1b:ea:c2:0a:9a:27:55:3c:db:
e7:be:a9:fc:1c:17:35:f7:d6:ba:d1:da:1b:4a:87:51:0e:b2:
29:5d:b4:35:96:13:74:f4:f9:12:1a:5a:a7:50:3c:85:cd:73:
46:74:26:df:0c:51:3a:f1:86:4c:bd:8f:d5:6a:2d:19:a2:1a:
af:9b:6a:ee:fc:b8:5c:3a:24:04:6c:f3:f9:6d:f4:2e:eb:8a:
a1:b8:b4:7a:b8:04:f5:a8:cd:29:45:13:20:81:9a:dd:b8:4d:
e4:8b:9f:99:52:d2:a3:98:fc:45:90:bd:08:b7:b8:e7:e8:22:
58:d9:af:16:db:3b:97:6a:76:0f:60:1c:03:db:41:63:cf:2d:
67:78:c9:7e:69:de:21:09:f5:46:25:cb:8d:ff:93:bf:ef:4c:
e6:a2:99:8c:c3:8a:cd:95:3d:17:08:4c:ff:45:37:d9:76:23:
0e:27:ee:e3:40:06:74:fc:3f:2d:e8:bd:f6:74:d7:db:8a:50:
96:15:6e:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 22 15:33:23 2025 by rpki-client