Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/czmHDhAmLGcJt7YWNxNLX5pseMo.cer
File: czmHDhAmLGcJt7YWNxNLX5pseMo.cer (raw, json)
Hash identifier: XCjeRgaDdyHJV5HhLnZdiYyny0kDFS8IcMYwl8MQ798=
Subject key identifier: 73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C2B0CDBAE51CA3A38A034B0E6F81E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 213.139.244.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:2b:0c:db:ae:51:ca:3a:38:a0:34:b0:e6:f8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7339870e10262c6709b7b61637134b5f9a6c78ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:37:91:bf:66:79:cf:2e:bb:74:a4:dd:b5:24:
bc:1c:88:a0:55:eb:fd:75:86:f0:2f:a4:42:9d:a2:
a0:c7:66:ec:f7:e0:9c:b3:c3:53:92:6c:73:6e:2a:
dd:17:5e:da:30:85:53:4a:5f:29:02:1b:ca:b9:a2:
35:53:ad:60:35:ac:96:b6:78:78:39:a6:e6:fa:49:
17:0a:66:c5:60:2b:07:f7:2b:a7:70:3d:a0:1e:d5:
7f:0c:e6:30:64:01:ad:30:a7:a8:d5:2e:2f:66:31:
ae:96:76:be:81:7b:71:63:ef:58:cc:3a:5a:7b:25:
d0:9e:e8:52:f7:05:dc:43:a9:44:3e:f0:64:59:eb:
1f:1c:1e:d6:48:b9:01:cb:1e:a7:97:4a:0b:e3:64:
73:b7:62:56:ce:69:f8:11:73:0c:fd:f8:05:ca:f4:
17:b1:95:cf:89:94:2a:b8:ca:ba:f3:58:28:79:d2:
9e:56:94:8b:20:91:ea:42:2f:e6:eb:90:c7:d0:bb:
d6:20:9d:cc:0e:98:97:38:99:45:bb:af:24:ec:c1:
27:f9:10:f2:a4:cb:db:37:13:3f:a2:da:37:6d:50:
4d:d4:52:cb:02:6b:2f:3b:3e:c7:31:ee:96:e8:4b:
8a:d9:8d:aa:61:37:54:72:94:f5:3c:c8:8b:b1:43:
9b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:39:87:0E:10:26:2C:67:09:B7:B6:16:37:13:4B:5F:9A:6C:78:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/4b83db-f4ff-4f0c-a3f6-154574fbb389/1/czmHDhAmLGcJt7YWNxNLX5pseMo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.244.0/22
Signature Algorithm: sha256WithRSAEncryption
88:de:db:2f:28:94:b4:b3:bc:61:e6:cf:91:51:4a:85:72:9b:
e0:68:81:72:b4:a4:1a:5f:e7:bf:bd:f4:a9:6a:56:1f:6a:b4:
fe:61:76:5b:a8:a6:79:86:96:96:5d:5f:a6:d1:7d:ef:2c:99:
65:5b:59:19:b1:ff:cc:85:f8:e0:c8:8f:d4:b1:a6:10:a4:8c:
40:7e:13:b8:60:80:08:58:20:ef:b2:87:f8:47:da:63:84:63:
1a:d3:f1:c6:d9:86:e3:ce:25:f8:4a:2f:17:df:d8:5e:c4:ab:
de:3a:89:c4:56:25:36:f5:02:d9:28:b4:4f:81:88:a5:a9:6a:
f7:71:09:ab:69:17:4d:b7:20:a2:e9:27:ec:c2:5f:2c:e7:26:
cf:21:33:08:1c:b2:c5:94:ae:ff:f9:36:86:2b:67:4b:6d:97:
7e:28:98:bd:27:11:cc:82:71:b9:00:cf:46:31:cf:2f:5d:19:
b7:6e:7f:9d:e0:0e:a8:92:79:a5:d0:24:07:af:44:39:95:2c:
e7:f0:44:4e:8f:bb:34:30:45:13:73:ad:62:95:a9:9a:ac:4d:
ad:d8:ea:3b:ca:13:42:2a:a1:7d:c5:29:01:d8:e2:5a:f8:8a:
30:ac:aa:a3:fc:61:00:82:3c:a3:ea:63:3f:45:fe:9d:1d:23:
a6:c2:41:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:36:05 2025 by rpki-client