Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
File: z0D92CoP3ztwvhgiHuumDYAe178.cer (raw, json)
Hash identifier: RTpddHEMTtDEMHcBhS7t4UZ8OXcAyOy482L8DrUZBhA=
Subject key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D941A080C774C1C2568E82706B4950
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8280
IP: 46.227.56.0/21
IP: 78.108.32.0/20
IP: 185.51.132.0/22
IP: 2001:1548::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:41:a0:80:c7:74:c1:c2:56:8e:82:70:6b:49:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d5:4a:8f:89:01:00:e5:6b:0c:aa:a5:47:6d:
82:33:4d:b8:76:1e:3b:1d:be:f4:76:f9:f6:57:89:
f6:a4:a0:2d:42:d5:7a:7d:0d:5e:e2:af:5f:eb:47:
5c:b0:4f:ac:1b:ac:cc:f4:42:d3:e4:83:ed:19:b7:
2a:c4:36:ee:d6:d9:d2:71:01:37:97:b6:af:1b:8d:
0e:7a:b8:ae:06:b7:e5:20:cf:17:f4:6b:b7:cc:26:
aa:38:81:a5:22:31:f9:66:a1:d1:ee:bb:dd:bb:8f:
7b:3b:56:13:6d:98:f6:e5:f8:c2:b4:8d:9e:e4:cb:
71:0f:f2:72:34:31:b7:1a:34:be:10:7e:99:6a:be:
c6:24:ba:ef:05:e1:f0:0f:53:5e:44:da:19:23:6d:
8d:39:ee:d7:64:93:f1:cd:f5:9f:b3:96:7f:83:ca:
ec:1e:34:1e:56:6e:4a:ab:77:68:13:30:1f:74:8c:
40:1c:f7:7a:1b:8b:9c:90:e4:db:78:98:84:a0:e6:
f2:b8:a8:c6:d9:e8:c4:4d:43:63:53:af:0d:4c:b7:
08:47:18:49:35:ac:fc:7a:fd:ec:4d:a7:1e:d7:23:
a6:90:bb:26:d9:63:52:b5:85:9c:78:08:4a:47:5b:
07:eb:37:25:10:25:b6:b5:3d:fd:66:71:3d:28:54:
84:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.56.0/21
78.108.32.0/20
185.51.132.0/22
IPv6:
2001:1548::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8280
Signature Algorithm: sha256WithRSAEncryption
33:99:0e:26:1c:85:6b:d5:c8:6d:54:8f:9a:df:12:cf:2e:13:
ba:66:4c:d9:4a:f8:86:a6:49:5b:5c:c1:1a:4c:f3:0b:f1:e3:
35:b9:79:8c:62:04:cd:1c:6a:10:d6:42:a7:46:32:58:8d:58:
42:69:48:02:45:d8:7d:3e:21:bf:33:9c:86:53:1c:81:ee:a5:
8b:d3:6b:b9:1a:d3:8b:f9:cd:e1:8d:2a:e0:01:8f:16:ce:71:
bd:c0:bf:81:aa:51:ed:bd:31:30:0d:e4:2c:66:7c:be:9d:93:
a8:9b:0c:17:98:c7:a6:d3:2c:bf:b7:21:5f:f8:2c:6f:3e:d6:
ec:16:93:e4:00:88:25:aa:a5:72:73:b2:6e:c0:a2:10:20:d0:
e5:03:ad:3d:1f:c5:f2:0a:51:1c:35:59:8f:4c:78:f2:3a:02:
73:d9:2d:a9:a2:a8:74:61:f0:df:dc:05:36:f7:59:06:7b:9c:
24:f3:3e:ed:3f:91:d1:a2:60:0d:0d:05:e4:ab:3a:f7:62:b9:
1c:b2:e6:a8:c1:12:84:73:26:b1:c5:e3:cb:da:c6:78:10:d4:
f0:38:c7:4a:fc:3d:ab:d7:38:de:e8:b1:15:3f:1b:88:b6:85:
01:d1:c3:df:54:46:1d:1f:ac:fa:ca:95:84:6a:5e:b5:53:b4:
48:3a:34:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:01:40 2025 by rpki-client