Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer
File: aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.cer (raw, json)
Hash identifier: VzbRaWSk8ULwJEyTEYT1iYcQ9nSqOvKbk8rXBoRXpqw=
Subject key identifier: 69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01990568282E1EDBE44DB27037812891C642
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Sep 2025 13:12:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:818::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:05:68:28:2e:1e:db:e4:4d:b2:70:37:81:28:91:c6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 1 13:12:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=699ee08ff671600d4034a3e1d9d5a90245cc9c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:cb:5b:40:a7:0d:35:32:81:17:12:4e:48:
94:8c:8e:6d:f2:a7:96:a5:ce:68:3e:9a:dc:f6:6d:
44:27:f4:f9:ed:ed:0a:a1:5b:a1:ea:b5:6b:f6:0e:
7a:8c:1f:ee:97:0a:7f:86:e3:c6:e2:3c:9c:9b:b7:
0e:16:e0:63:34:35:ee:24:5c:0c:9d:21:02:54:0b:
d9:21:1c:e9:79:f1:da:78:b5:37:65:a0:19:46:07:
d4:1e:16:3b:29:95:9e:4b:f8:50:53:87:4f:99:c5:
c1:61:f5:57:da:36:52:4a:19:eb:e2:ff:2f:41:35:
49:0f:48:2d:93:3d:75:c9:36:6e:44:ff:0e:4f:0b:
d6:d1:c0:fc:80:83:7e:28:09:84:75:f9:30:a5:18:
da:28:d0:6a:3d:6d:bc:a3:f2:6d:c7:a4:26:18:6f:
61:c1:10:39:2a:b2:ad:92:a8:60:22:d8:a4:2e:14:
c1:0f:3c:37:27:8b:b0:b2:7c:1d:98:d9:6d:57:16:
ce:99:14:b5:1c:e2:25:7f:1c:3e:3f:65:75:70:0d:
ed:62:5a:ae:d0:57:5d:9c:0d:62:f9:bb:7c:95:d7:
9c:51:cf:c1:9f:a1:85:6f:6f:b1:67:56:bc:d0:78:
51:c5:2e:df:83:de:8c:18:56:37:5c:d0:35:cc:97:
23:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9E:E0:8F:F6:71:60:0D:40:34:A3:E1:D9:D5:A9:02:45:CC:9C:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e6727c-0803-4a03-9771-1d08addca271/1/aZ7gj_ZxYA1ANKPh2dWpAkXMnBU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:818::/48
Signature Algorithm: sha256WithRSAEncryption
02:ed:d8:31:91:1c:12:6d:ce:bf:d0:43:8d:bf:a2:54:79:4d:
43:3c:8e:6f:4c:db:1d:79:75:21:9d:1e:44:57:3c:36:c6:b3:
44:40:03:b1:f8:c8:94:66:f0:d8:af:dc:ec:e7:ac:be:9a:fc:
40:7f:81:75:2a:9e:5c:2d:9a:9c:2f:08:90:89:75:f4:b2:a1:
c8:b4:de:a1:93:36:ef:16:45:ca:65:09:d2:5c:6b:fe:89:b0:
28:e6:00:f5:74:b1:f9:cf:4c:00:f1:65:8d:71:4e:e5:0a:d9:
32:60:da:1b:6a:38:40:25:3a:93:29:62:0e:a8:78:9a:b8:a9:
3d:f5:63:94:36:f7:ec:88:58:d4:db:99:b6:3a:3e:c9:2a:24:
c8:4b:fc:11:6a:7f:0b:8e:1e:26:ad:27:dc:b5:f6:c5:12:8e:
4b:81:53:5c:de:02:22:a7:6e:85:ad:be:65:02:26:a3:e6:8f:
6a:53:93:f6:9f:8b:da:5b:24:c1:df:1f:79:f7:5e:ba:9f:b2:
ca:47:ef:74:f3:35:b5:b3:5a:b8:22:a6:a4:34:69:93:0a:31:
f4:42:be:75:8a:ac:0b:77:90:7d:05:89:ed:b8:93:45:4b:14:
93:94:9e:ce:a9:b3:93:d3:97:f7:4e:51:50:c2:e8:9c:f5:23:
11:7b:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 02:34:01 2025 by rpki-client