Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
File: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer (raw, json)
Hash identifier: aVbyyT+xbsEluY+pO2RU5MlY569pLGjJm3V4cdflcZw=
Subject key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01973A267B1B623638BBD7DC38EAD37A7D25
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 04 Jun 2025 08:54:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41327
AS: 196753
AS: 208018
IP: 31.185.96.0/21
IP: 93.94.88.0/21
IP: 185.61.168.0/22
IP: 185.157.228.0/22
IP: 185.172.204.0/22
IP: 2a03:b020::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3a:26:7b:1b:62:36:38:bb:d7:dc:38:ea:d3:7a:7d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 4 08:54:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b732762a5e861e976de53d14786f39e3a669681b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d7:40:04:56:aa:1e:be:d8:b8:30:e0:dc:99:
8d:9d:fa:0d:85:20:94:e2:31:c9:5d:66:46:ae:f9:
a0:c9:06:42:09:be:c3:86:9f:a4:47:f9:ce:e9:19:
96:57:ca:a3:50:c7:35:b5:9c:0f:c2:62:f1:8e:cf:
54:ab:e3:d7:f0:1e:4d:40:12:44:af:79:46:23:90:
80:69:ba:e2:9a:d0:65:e0:b4:ea:34:20:d4:66:ee:
9c:b8:61:a3:5c:93:69:e9:27:29:fc:dd:fe:2b:aa:
40:5e:40:1b:c5:ba:90:b0:03:8a:8e:79:30:3c:7d:
de:69:bb:9f:76:31:76:92:6a:58:ed:d7:18:12:62:
df:48:a5:f7:4d:75:4c:f7:bc:5e:75:05:29:1b:a0:
1c:9f:4b:4c:07:8a:2c:bd:2f:56:42:24:83:f7:5f:
c2:16:ab:5e:7e:a4:43:ad:d2:ae:44:ce:9e:16:be:
3f:69:a7:26:cb:e2:c0:07:e1:5c:25:48:69:3c:59:
3c:b9:36:ab:27:98:4e:06:86:17:93:ec:69:5f:5a:
4d:5c:30:80:68:e8:9d:22:b8:05:21:02:1f:dc:6c:
77:51:9b:34:f0:c0:ba:a5:a2:f2:e4:72:03:ba:cf:
38:01:b3:88:4a:42:6b:5b:bf:ed:4a:b2:af:53:78:
e1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.185.96.0/21
93.94.88.0/21
185.61.168.0/22
185.157.228.0/22
185.172.204.0/22
IPv6:
2a03:b020::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41327
196753
208018
Signature Algorithm: sha256WithRSAEncryption
16:37:be:49:3d:15:41:20:47:99:16:d0:a1:48:99:e9:16:18:
af:29:fc:56:59:a5:71:83:ca:fb:84:a3:ad:8c:fa:ec:43:2b:
55:39:3f:50:3d:7f:05:6f:22:67:93:f3:b6:55:94:ba:6d:57:
a4:b9:94:a2:6c:53:6c:7d:08:27:9a:ee:58:7f:11:f1:f7:d6:
c3:33:2e:90:36:00:f4:8a:4a:25:3a:2e:57:e8:39:bc:89:db:
ca:de:c8:5d:9d:c8:1e:03:a9:48:47:df:1b:2a:4a:5b:81:34:
c8:c1:d1:41:ea:5e:bb:12:d2:50:8a:04:fc:73:b5:8f:f8:c6:
7c:36:98:d3:e3:a3:21:db:16:dd:86:36:59:05:f1:17:61:c7:
08:70:cd:61:9a:36:8e:21:ac:21:55:3a:41:e0:90:ef:21:58:
46:2e:14:f3:6d:32:a5:c2:98:d0:c5:5b:87:5a:2c:0d:a6:1a:
11:5c:f7:be:ba:29:94:eb:a1:fb:13:53:71:5b:e7:b3:48:fa:
ff:49:4a:68:cc:1b:e0:62:05:5a:81:fd:bb:f4:b8:da:7b:64:
d9:cc:c7:46:42:a3:6f:be:ff:50:37:85:50:32:8e:a6:b3:b4:
b1:ff:74:8b:f6:17:cf:90:9c:ad:e9:f5:a8:93:ca:2b:c8:e6:
7d:24:80:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:00:13 2025 by rpki-client