Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z3P3vZzZk2geMP7FxZtHVlIroxw.cer
File: z3P3vZzZk2geMP7FxZtHVlIroxw.cer (raw, json)
Hash identifier: tjLzOLkyC0EPhIjPizTywnaLt95DCqfQDLnPy7/SPoY=
Subject key identifier: CF:73:F7:BD:9C:D9:93:68:1E:30:FE:C5:C5:9B:47:56:52:2B:A3:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B6550CF7EC91DD624FB261E44903F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/z3P3vZzZk2geMP7FxZtHVlIroxw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.220.129.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:65:50:cf:7e:c9:1d:d6:24:fb:26:1e:44:90:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf73f7bd9cd993681e30fec5c59b4756522ba31c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8b:52:a6:7b:75:7a:f3:0e:6e:0d:97:18:fc:
4a:eb:1a:bb:bc:5f:c7:67:e6:29:1e:09:0d:c7:9a:
bd:58:cf:06:97:ba:70:66:73:84:dd:6c:ac:64:12:
fe:a5:36:b0:5e:87:f2:a6:52:68:0f:41:f4:08:fe:
b2:27:48:2c:7d:04:4b:6a:fc:9e:d2:fa:c9:a2:7b:
fe:87:72:9d:e6:1c:b4:87:0e:c5:0e:67:e5:5b:60:
b3:a0:c5:82:46:1b:6a:cf:07:c7:d1:1e:b5:0c:4d:
a0:d7:f0:00:90:10:6d:e8:f6:c7:f7:ed:bb:9c:df:
44:d4:ef:f8:c0:3f:43:75:d2:cf:ae:88:9f:96:aa:
0b:4d:a9:e8:e9:59:15:24:8a:04:07:b5:18:7c:de:
18:d4:5b:ea:59:c0:e4:94:3b:d0:cd:23:79:c5:3d:
c9:76:88:e6:ca:89:46:2d:63:de:fe:1b:7f:1f:44:
9e:aa:ed:29:6e:83:e0:74:57:9a:8f:30:8a:0b:cb:
cc:c1:64:8d:1d:b8:37:1d:13:34:d4:c5:bc:db:af:
95:6b:40:ce:84:d9:0b:63:7b:cb:b6:64:95:3a:17:
72:57:0a:e2:57:43:c0:d7:c2:f6:e2:fc:f8:8d:49:
bc:cb:71:07:e6:ce:4e:7e:fd:0b:04:d9:12:46:da:
94:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:73:F7:BD:9C:D9:93:68:1E:30:FE:C5:C5:9B:47:56:52:2B:A3:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0b0d7f-8196-4275-a911-7a793992fba0/1/z3P3vZzZk2geMP7FxZtHVlIroxw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.129.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ed:b3:61:ea:da:3a:6a:1d:6d:ab:7a:cd:13:4f:16:7c:8d:
f0:53:b2:bb:8e:11:7f:b7:f7:9c:fd:26:1d:93:f1:13:31:59:
88:d1:05:f7:67:0b:d7:73:41:ed:10:7c:63:1a:05:51:67:57:
37:9c:ea:29:88:38:03:b2:be:19:8d:b5:63:3b:3c:f6:86:7e:
b9:fd:57:a8:00:56:d9:2c:ff:36:32:92:af:f1:b3:0a:97:a6:
98:16:85:67:d3:61:6c:32:32:7f:43:9e:1b:43:38:0b:68:39:
3a:8e:7a:e2:22:7c:bf:67:5d:7d:12:3a:99:fa:49:1f:c1:02:
1b:e6:1d:db:b4:48:f2:ea:da:a9:4e:90:a7:1f:62:2f:19:db:
a2:c3:e0:11:2d:cf:a6:d8:60:bc:49:53:84:eb:a6:6a:97:74:
19:9d:0d:25:30:a3:ae:0b:73:58:0f:d1:10:1a:23:d4:f7:87:
44:25:0c:7c:da:07:54:d6:e0:69:38:09:bf:00:63:99:53:f4:
df:44:f3:08:6c:bb:c5:88:1a:1a:97:b1:4b:cd:2e:bf:d2:f0:
7b:50:33:15:fe:58:c0:fe:41:9b:61:87:ee:06:9b:d2:a1:80:
d6:2c:a2:34:31:5f:c0:4c:0c:1b:5c:5b:1d:35:c4:78:0b:77:
37:8b:b5:80
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQma2VQz37JHdYk+yYeRJA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjczZjdiZDljZDk5MzY4MWUzMGZlYzVjNTliNDc1NjUyMmJhMzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqItSpnt1evMObg2XGPxK6xq7vF/H
Z+YpHgkNx5q9WM8Gl7pwZnOE3WysZBL+pTawXofyplJoD0H0CP6yJ0gsfQRLavye
0vrJonv+h3Kd5hy0hw7FDmflW2CzoMWCRhtqzwfH0R61DE2g1/AAkBBt6PbH9+27
nN9E1O/4wD9DddLProiflqoLTano6VkVJIoEB7UYfN4Y1FvqWcDklDvQzSN5xT3J
dojmyolGLWPe/ht/H0Sequ0pboPgdFeajzCKC8vMwWSNHbg3HRM01MW826+Va0DO
hNkLY3vLtmSVOhdyVwriV0PA18L24vz4jUm8y3EH5s5Ofv0LBNkSRtqUkwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFM9z972c2ZNoHjD+xcWbR1ZSK6McMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2RmLzBiMGQ3
Zi04MTk2LTQyNzUtYTkxMS03YTc5Mzk5MmZiYTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGYvMGIwZDdm
LTgxOTYtNDI3NS1hOTExLTdhNzkzOTkyZmJhMC8xL3ozUDN2WnpaazJnZU1QN0Z4
WnRIVmxJcm94dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9yBMA0GCSqGSIb3DQEBCwUAA4IBAQB37bNh
6to6ah1tq3rNE08WfI3wU7K7jhF/t/ec/SYdk/ETMVmI0QX3ZwvXc0HtEHxjGgVR
Z1c3nOopiDgDsr4ZjbVjOzz2hn65/VeoAFbZLP82MpKv8bMKl6aYFoVn02FsMjJ/
Q54bQzgLaDk6jnriIny/Z119EjqZ+kkfwQIb5h3btEjy6tqpTpCnH2IvGduiw+AR
Lc+m2GC8SVOE66Zql3QZnQ0lMKOuC3NYD9EQGiPU94dEJQx82gdU1uBpOAm/AGOZ
U/TfRPMIbLvFiBoal7FLzS6/0vB7UDMV/ljA/kGbYYfuBpvSoYDWLKI0MV/ATAwb
XFsdNcR4C3c3i7WA
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:41:58 2025 by rpki-client