Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
File: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer (raw, json)
Hash identifier: 3NzLIjtubX/SNZHCGSyYToZ24KH5cDSwSnsChcf497M=
Subject key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA225B0031F2848DA2390AAD2EB28C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41327
AS: 196753
IP: 31.185.96.0/21
IP: 93.94.88.0/21
IP: 185.61.168.0/22
IP: 185.157.228.0/22
IP: 2a03:b020::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:22:5b:00:31:f2:84:8d:a2:39:0a:ad:2e:b2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b732762a5e861e976de53d14786f39e3a669681b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d7:40:04:56:aa:1e:be:d8:b8:30:e0:dc:99:
8d:9d:fa:0d:85:20:94:e2:31:c9:5d:66:46:ae:f9:
a0:c9:06:42:09:be:c3:86:9f:a4:47:f9:ce:e9:19:
96:57:ca:a3:50:c7:35:b5:9c:0f:c2:62:f1:8e:cf:
54:ab:e3:d7:f0:1e:4d:40:12:44:af:79:46:23:90:
80:69:ba:e2:9a:d0:65:e0:b4:ea:34:20:d4:66:ee:
9c:b8:61:a3:5c:93:69:e9:27:29:fc:dd:fe:2b:aa:
40:5e:40:1b:c5:ba:90:b0:03:8a:8e:79:30:3c:7d:
de:69:bb:9f:76:31:76:92:6a:58:ed:d7:18:12:62:
df:48:a5:f7:4d:75:4c:f7:bc:5e:75:05:29:1b:a0:
1c:9f:4b:4c:07:8a:2c:bd:2f:56:42:24:83:f7:5f:
c2:16:ab:5e:7e:a4:43:ad:d2:ae:44:ce:9e:16:be:
3f:69:a7:26:cb:e2:c0:07:e1:5c:25:48:69:3c:59:
3c:b9:36:ab:27:98:4e:06:86:17:93:ec:69:5f:5a:
4d:5c:30:80:68:e8:9d:22:b8:05:21:02:1f:dc:6c:
77:51:9b:34:f0:c0:ba:a5:a2:f2:e4:72:03:ba:cf:
38:01:b3:88:4a:42:6b:5b:bf:ed:4a:b2:af:53:78:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.96.0/21
93.94.88.0/21
185.61.168.0/22
185.157.228.0/22
IPv6:
2a03:b020::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41327
196753
Signature Algorithm: sha256WithRSAEncryption
02:10:1a:e8:e9:7d:88:1c:16:7d:10:e0:b9:5b:a9:58:83:ac:
bd:7b:9a:2d:b6:40:bb:65:cf:6e:06:ad:9f:72:30:0a:03:c6:
a2:8e:85:f8:e1:17:8a:3e:a5:ff:cc:bf:cb:b5:eb:52:a7:61:
69:4f:13:f4:11:85:f9:7b:cc:37:83:5e:41:e1:f1:ca:b4:a6:
64:6a:ea:c5:cb:a7:c4:21:ec:48:83:64:e2:b8:38:93:0d:5b:
5d:f5:93:99:66:27:b6:3c:6e:f3:5a:53:1a:73:1b:6c:bd:25:
b7:42:81:1f:d8:da:0a:a5:6c:27:1d:aa:4d:38:37:52:da:42:
db:9c:d9:ae:06:e2:67:b1:ed:1a:d7:2a:2f:e1:4a:2e:e0:b9:
c9:38:1b:cb:16:10:0d:96:c8:5e:b6:f6:54:8e:75:e0:ad:53:
49:12:ca:a3:7b:e8:bc:cc:91:ad:eb:d7:0d:42:c2:f9:3f:dc:
f0:db:b1:47:04:80:8e:d3:55:af:3c:db:de:aa:fb:4c:da:7b:
ac:96:a6:8c:0c:0d:f5:dc:30:d7:8a:68:fa:2d:ba:6a:0c:c2:
ee:ee:0a:d6:d8:29:67:48:9e:e5:25:3e:b3:2d:0a:7f:cf:5c:
66:66:d2:3d:5b:28:a2:15:63:56:fa:2d:00:ba:d8:ac:ae:c3:
59:c2:5f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:55:41 2025 by rpki-client