Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pRZKRoFl6caTvYGEw8pWbKcP1WA.cer
File: pRZKRoFl6caTvYGEw8pWbKcP1WA.cer (raw, json)
Hash identifier: 0fh3hczByTBpN9+4sXZCL3pS1ROM1/GkKRVMjOMmQSc=
Subject key identifier: A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196D45A4BB3C2A844E923630682C5E7791A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 15 May 2025 14:30:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39874
IP: 45.81.64.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:5a:4b:b3:c2:a8:44:e9:23:63:06:82:c5:e7:79:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 15 14:30:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5164a468165e9c693bd8184c3ca566ca70fd560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:59:87:4f:63:5e:38:44:73:be:fc:22:a5:d9:
7e:13:9c:69:1f:94:2e:1c:3a:47:53:ac:37:f2:04:
d8:f8:3d:83:bb:45:8d:86:db:82:3a:17:94:3b:27:
3f:2a:f8:1a:b4:47:a2:05:46:b2:0d:0b:ca:47:d1:
d7:25:e0:1b:3a:dd:f1:d8:47:12:a0:fd:60:62:ed:
34:ef:f2:44:29:79:fd:8f:d8:fd:6f:b3:fa:dc:e4:
9b:3d:cf:79:53:07:e1:a1:e8:90:9a:d4:eb:ee:76:
37:77:3a:ce:26:72:5e:4a:f3:de:8f:a9:f0:a5:38:
8e:c6:6d:12:4b:ea:60:39:27:d9:c0:b0:2e:53:a4:
2f:28:ce:c1:c2:b8:1c:04:9a:f6:27:45:a6:b1:08:
19:68:fa:3f:d3:7d:b5:a6:a5:06:03:0b:a9:5e:ab:
81:e6:6b:36:c2:3e:58:c2:b5:a8:76:4a:7f:8f:70:
2f:cd:8a:c6:f9:c4:88:77:4f:72:7c:e0:a5:43:b1:
a4:7b:3d:43:db:46:6f:2a:10:9e:3d:bf:47:8f:82:
35:22:ff:2f:d1:9b:f0:30:c5:23:1a:cb:14:0d:9a:
0d:28:2a:bb:f4:2f:33:e9:84:0d:00:cd:eb:4e:b5:
cf:08:9a:4e:1e:22:61:47:4e:dc:f8:92:2c:d3:6a:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:16:4A:46:81:65:E9:C6:93:BD:81:84:C3:CA:56:6C:A7:0F:D5:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcfba-cda0-4ad3-9893-94587d8331f9/1/pRZKRoFl6caTvYGEw8pWbKcP1WA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.64.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39874
Signature Algorithm: sha256WithRSAEncryption
b0:1c:1d:16:dd:9a:ca:84:48:9e:91:d9:06:ef:f3:92:dc:19:
6f:c5:4a:50:77:2b:67:98:0d:0f:66:d6:eb:60:4e:7d:7d:5e:
e8:20:17:d8:bf:27:86:56:4d:44:cf:99:27:32:2b:45:f6:0b:
82:b2:7d:92:e9:07:f4:f5:89:3b:90:37:70:0c:49:72:9f:98:
de:d7:36:0e:2c:26:78:80:56:f8:df:d3:10:52:ac:84:bf:65:
93:76:6a:ab:88:eb:99:ea:5f:7f:53:aa:ab:bd:3d:ba:d9:79:
5b:67:af:af:9b:bf:e7:80:65:72:a4:43:ab:13:ce:e1:a9:aa:
ca:bb:96:be:a5:ab:a6:21:b6:b4:2e:bc:ff:d1:f6:e5:0e:6c:
8e:98:8a:1b:a9:54:27:48:fe:e3:e9:7d:49:00:c3:dc:da:15:
61:cd:0d:1d:94:0b:21:99:d7:72:2e:9f:9c:17:2e:01:47:78:
45:c0:e6:69:1b:60:d0:ce:6e:c1:2c:59:3d:e1:8d:4f:5f:25:
1d:6d:9e:e6:f1:d4:4f:5d:78:25:18:5e:1f:31:98:d1:ef:c4:
f3:93:2b:42:26:f6:ba:e4:d3:b0:f8:f3:e5:13:c4:21:46:7c:
ba:4a:57:22:dc:5f:e3:5b:e5:2f:12:df:1a:05:e3:50:72:b3:
ac:27:8a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:44:04 2025 by rpki-client