Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
File: Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer (raw, json)
Hash identifier: vb+h8n4pPfms34xRk2DY/r7/6c8LEvBRYdd28PbJeyU=
Subject key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067C3627ABDB6602D2B8BED8B917A51
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31182
IP: 146.66.134.0/23
IP: 193.8.139.0/24
IP: 2a14:5ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c3:62:7a:bd:b6:60:2d:2b:8b:ed:8b:91:7a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f6:25:e0:7f:c0:34:a6:1c:46:f4:cd:ff:7a:
34:63:de:b8:69:72:16:c7:19:5b:23:7d:6b:e3:74:
6f:4a:06:3f:7f:e7:10:e6:d7:a9:06:67:8b:7e:39:
92:4d:10:0a:70:b1:a1:4e:cb:b0:ab:82:53:11:95:
89:b5:07:56:2e:92:28:16:f0:79:53:d7:1a:9d:2c:
ad:f3:37:02:39:91:5d:bc:9c:d2:eb:4e:68:f1:cd:
cf:5f:bd:a2:4b:f0:d9:f2:d0:5b:7b:c5:c3:51:55:
70:31:05:b6:98:3e:70:5b:d3:19:5d:f5:a5:a4:9b:
2a:be:46:fc:01:8a:bc:3b:e5:52:49:79:52:0e:40:
80:02:a2:75:83:b7:fb:98:07:bc:5a:1d:db:69:d7:
c6:64:12:d1:57:1e:9b:96:9c:93:e3:5d:80:00:16:
44:f5:3f:12:01:69:cc:f9:11:a6:19:2e:5b:d5:28:
47:ca:08:11:56:b5:31:bd:45:bd:b4:01:0e:3b:45:
76:05:e0:a4:ef:32:c6:7a:23:b0:7e:e4:69:17:9b:
b4:f8:6c:8c:83:4e:9c:3c:70:16:dd:83:90:6c:49:
bc:4a:15:c9:62:9a:79:d5:39:67:09:08:ec:01:ad:
bd:7f:1f:d6:b5:c4:bf:03:97:04:3a:f9:c9:fc:f7:
33:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.134.0/23
193.8.139.0/24
IPv6:
2a14:5ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31182
Signature Algorithm: sha256WithRSAEncryption
3e:88:7e:ef:8b:95:8b:8c:03:4e:10:8b:b9:19:5b:d8:6d:bd:
c2:95:5e:07:c0:ea:76:62:70:1a:55:06:1d:74:6c:9f:a7:7c:
1a:37:3f:fd:cc:09:9d:eb:7a:9f:b5:c7:9e:2c:2c:72:29:fd:
90:35:09:77:a1:90:e9:da:37:59:06:b6:aa:70:89:0a:c9:11:
b3:e4:c6:48:e5:2f:cd:40:33:c4:0d:fd:f9:d2:f3:8e:5b:9b:
90:1b:75:30:fb:6f:50:91:60:45:ad:5c:58:d6:24:77:05:96:
43:ca:be:3a:23:da:da:1d:bf:70:c5:c8:7a:64:d8:43:d3:a9:
d3:31:6b:49:16:d8:35:b9:b6:74:9b:be:4b:dd:59:98:8b:2a:
9b:03:fe:5d:d3:cd:b4:be:b1:66:ae:ec:87:2a:e6:f8:4d:24:
08:48:32:69:bc:bf:62:fe:41:39:7b:c7:aa:e7:b0:90:1a:5c:
0b:fa:67:a2:7f:1b:69:db:1b:6d:5d:0d:44:f3:2c:94:38:ec:
4a:5d:fe:0e:88:38:c0:b2:a3:8c:a0:ef:3f:fe:df:31:93:bc:
5d:5d:ed:ac:26:81:24:34:27:94:d4:03:a5:bb:99:d2:05:c6:
ec:21:08:43:1b:21:70:b3:b8:66:4e:63:4d:71:f8:b4:b4:cd:
f4:c8:25:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:58:10 2025 by rpki-client