Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer
File: ZnKfnQeG9ooezVxakrw5LYaRl14.cer (raw, json)
Hash identifier: 887EUxg+m8YHRopr5QpqlwWcoM88Cj7Er0BfmpH7+aM=
Subject key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144155F5FA9ADA64A8C28AC03D405C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.226.168.0/22
IP: 2a09:fbc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:15:5f:5f:a9:ad:a6:4a:8c:28:ac:03:d4:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:8d:5c:b8:21:cf:63:c7:17:5e:09:55:c8:
bd:8b:6e:65:b7:39:62:be:1c:a5:8c:0f:23:a7:7d:
54:73:e8:12:b5:92:03:22:70:fc:e8:ba:1d:ab:83:
37:16:e7:72:0b:97:2a:9e:18:c7:b3:0f:4e:6b:4e:
2d:97:04:63:1a:40:1b:42:ad:37:bd:ba:73:33:c7:
0f:ae:69:e7:e7:b0:fe:b7:e5:0a:52:90:70:97:cd:
10:d6:90:f1:1a:a1:35:fe:62:8e:d6:27:34:a4:22:
e5:7c:81:ce:4f:24:27:67:b7:6f:5d:df:e6:46:18:
64:83:c7:e8:b1:62:5f:ee:54:1f:1c:a3:a2:5e:8e:
7a:13:91:4a:ad:f3:b2:3e:bb:95:8b:6b:5e:3b:c6:
65:87:04:9a:5d:71:d0:36:95:9c:73:a8:25:e2:2c:
31:23:76:00:3f:85:87:70:41:92:ed:c2:f8:cf:3d:
1b:96:8b:d7:c9:52:b6:a8:31:6e:5d:95:eb:d1:d6:
78:ab:fe:f4:08:df:cb:94:59:2c:33:b7:27:03:53:
fc:f6:c4:ef:4f:f3:a6:f3:87:48:d2:33:22:63:36:
b4:ff:73:c8:19:d7:0f:56:67:40:39:0e:0c:b4:b0:
7c:fe:fc:7e:96:93:f5:23:a2:60:d9:76:8d:f5:2c:
81:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.168.0/22
IPv6:
2a09:fbc0::/29
Signature Algorithm: sha256WithRSAEncryption
97:8a:aa:3b:0a:d4:db:e8:39:72:62:55:de:22:a6:e9:b1:39:
3a:bc:4a:c9:ef:4f:66:f9:d2:09:3c:c1:cb:19:cf:64:29:3e:
da:56:06:b3:03:4b:d0:fa:8b:7b:2a:12:77:eb:33:0b:1a:59:
3e:de:02:d8:fe:7e:7d:3b:da:af:f9:f6:56:30:ed:b7:f7:d0:
66:ba:cd:f6:9a:f0:4f:07:a1:fb:58:c2:cd:5e:6e:74:2d:1f:
75:84:95:9b:2c:fb:46:55:2a:b0:9f:9b:28:7b:b3:20:d6:c4:
0a:6b:57:1b:f6:fe:63:cd:4c:6b:57:04:99:f5:8d:a7:f6:ec:
40:3e:5f:ed:c6:f6:e7:eb:89:73:9d:7b:aa:8b:32:3c:2b:f7:
56:8a:17:dd:a8:5a:12:bd:a9:aa:ab:86:e5:b5:8e:7a:3e:fa:
db:78:96:ce:2b:47:0f:ba:f1:12:ab:d0:f6:9c:12:f1:50:0c:
5b:6e:c8:71:2b:26:54:6e:67:5e:a5:44:38:01:db:91:ca:d5:
f6:dd:98:1b:46:8b:58:af:4e:08:29:e2:f0:ec:93:ba:3e:54:
57:b5:22:b4:84:09:0a:0e:f0:e2:57:5d:0d:a3:af:3d:2a:89:
26:66:d9:62:33:27:28:b4:f7:39:a8:15:95:87:41:f7:d5:5a:
ef:03:20:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 16:35:17 2025 by rpki-client