Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
File: zNdhWb_Z4zdSPukw898RHWuucwY.cer (raw, json)
Hash identifier: SHteqxeKss1yx96D/xt6OuqMif98OyBJJL5yCFzOIKs=
Subject key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019505069D6F95D5FBA3FA904E9B76B4ED7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 14 Feb 2025 15:14:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.129.79.0/24
IP: 46.150.240.0/20
IP: 91.188.244.0/23
IP: 91.214.117.0 -- 91.214.119.255
IP: 91.226.30.0/23
IP: 91.227.155.0/24
IP: 91.241.180.0/23
IP: 91.243.188.0/23
IP: 94.158.20.0/23
IP: 176.103.80.0/20
IP: 176.119.140.0/24
IP: 176.119.142.0/23
IP: 194.187.100.0/22
IP: 195.3.180.0/23
IP: 195.95.216.0/23
IP: 2a01:48a0::/32
IP: 2a05:1e40::/29
IP: 2a06:d640::/29
IP: 2a09:2980::/29
IP: 2a09:a800::/29
IP: 2a09:af80::/29
IP: 2a09:bc00::/29
IP: 2a09:c700::/29
IP: 2a09:cf00::/29
IP: 2a09:d700::/29
IP: 2a09:dd00::/29
IP: 2a09:e300::/29
IP: 2a09:e700::/29
IP: 2a09:ef00::/29
IP: 2a0a:b380::/29
IP: 2a0b:9000::/29
IP: 2a0d:3c40::/29
IP: 2a0d:95c0::/29
IP: 2a0d:afc0::/29
IP: 2a0d:c100::/29
IP: 2a0d:fcc0::/29
IP: 2a0e:3f40::/29
IP: 2a0e:5880::/29
IP: 2a0f:3100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:05:06:9d:6f:95:d5:fb:a3:fa:90:4e:9b:76:b4:ed:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 14 15:14:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:df:50:3c:c8:32:a0:34:00:3a:b4:1f:ba:
2a:72:25:e0:94:ba:de:47:dc:3a:4b:e7:b2:02:8a:
c1:a2:ee:9e:c7:4c:66:94:cf:d0:92:ca:6b:c4:bc:
4e:50:4d:72:8d:b9:a9:5b:83:2a:17:14:14:c2:25:
db:81:2b:ac:52:90:3f:1f:ca:64:f9:b0:d0:e9:f8:
1f:d2:42:05:3e:88:05:a2:7e:72:30:e2:c3:90:4e:
ed:bd:f6:b7:73:05:93:87:a1:01:42:25:4a:9d:2c:
93:66:1b:3f:6c:62:bd:10:d9:49:99:7c:46:fe:5a:
29:8a:00:47:e3:ee:43:3c:bd:04:11:bc:50:41:85:
cf:b7:02:bf:21:17:f7:cd:d7:b8:bd:71:53:66:2c:
0f:bb:8a:0f:87:87:fd:d6:48:b9:f8:6a:c9:09:de:
dc:a6:6c:17:50:a8:94:8c:5a:06:6e:a7:16:f1:2d:
ff:15:f6:95:0f:74:cf:d8:e0:1c:06:b5:99:b2:f9:
e1:37:11:92:e7:8b:b6:ab:f6:62:e0:05:d7:48:ca:
9c:9f:c1:7a:22:ab:04:89:c3:61:2a:fe:ae:62:66:
c1:ea:4f:30:f2:fb:c5:de:0a:e1:20:92:58:68:80:
2b:b6:a5:d8:8c:a8:ec:c5:c5:49:38:a3:49:82:06:
e8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.79.0/24
46.150.240.0/20
91.188.244.0/23
91.214.117.0-91.214.119.255
91.226.30.0/23
91.227.155.0/24
91.241.180.0/23
91.243.188.0/23
94.158.20.0/23
176.103.80.0/20
176.119.140.0/24
176.119.142.0/23
194.187.100.0/22
195.3.180.0/23
195.95.216.0/23
IPv6:
2a01:48a0::/32
2a05:1e40::/29
2a06:d640::/29
2a09:2980::/29
2a09:a800::/29
2a09:af80::/29
2a09:bc00::/29
2a09:c700::/29
2a09:cf00::/29
2a09:d700::/29
2a09:dd00::/29
2a09:e300::/29
2a09:e700::/29
2a09:ef00::/29
2a0a:b380::/29
2a0b:9000::/29
2a0d:3c40::/29
2a0d:95c0::/29
2a0d:afc0::/29
2a0d:c100::/29
2a0d:fcc0::/29
2a0e:3f40::/29
2a0e:5880::/29
2a0f:3100::/29
Signature Algorithm: sha256WithRSAEncryption
25:24:bd:9c:c9:2d:eb:9f:7b:83:b2:85:4b:22:15:21:c9:4f:
4f:d1:2f:67:98:1d:4d:d9:d0:5f:dd:1e:43:70:c7:5f:d9:7b:
1d:5f:6a:1d:6c:60:73:fe:27:ba:e6:ab:7d:71:73:2d:cb:f7:
ec:86:f2:ed:17:9e:52:37:36:d1:57:2c:59:c5:6c:e8:74:5e:
f0:1d:0c:89:80:6a:59:64:f7:de:29:c6:36:c0:a6:72:c9:2a:
77:d1:dc:db:b3:c8:cf:bb:b5:68:95:e8:dd:e1:04:3d:c6:d2:
0c:8b:e8:c3:5a:e9:3e:ff:54:32:40:bb:94:00:cc:97:48:18:
6c:6f:b9:21:31:27:66:c5:41:fa:68:e7:97:76:bc:20:b1:d8:
97:58:cf:7b:cf:49:0d:77:bf:c6:ab:83:da:f5:e3:4a:cc:4d:
1c:b4:c6:5b:94:24:da:9e:2a:41:65:ff:60:d1:42:84:06:9e:
11:5c:2a:d5:d6:05:f2:14:86:84:34:72:ea:bd:64:f9:60:dd:
07:20:20:4c:1a:66:8c:19:5f:86:27:68:71:08:4c:f9:3b:54:
96:10:26:f3:46:71:d2:a0:81:14:e1:de:51:29:89:41:38:06:
f7:bc:e9:0e:d6:f7:97:6f:9a:ad:fd:82:f4:28:02:5c:65:b6:
37:a9:39:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:49:39 2025 by rpki-client