Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zepK3ugLBlGc5A3T0T8oup9XWVc.cer
File: zepK3ugLBlGc5A3T0T8oup9XWVc.cer (raw, json)
Hash identifier: k/ury9P1UrjRARqq1GObJlWLvDByCaC/nouAol4FwRA=
Subject key identifier: CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6CF7ADF6F2DC21EB1D13A5EAA4420
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.213.250.0/24
IP: 91.227.208.0/24
IP: 185.64.72.0/22
IP: 2a03:1220::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:cf:7a:df:6f:2d:c2:1e:b1:d1:3a:5e:aa:44:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdea4adee80b06519ce40dd3d13f28ba9f575957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:c1:55:fe:a1:b9:9e:45:96:6e:5b:12:65:
a8:5c:0f:6a:a5:49:e3:39:27:cd:b5:3e:0e:d4:39:
6f:a2:ee:94:2f:4a:9a:02:bc:cd:94:28:7b:af:88:
f4:9d:65:1b:b3:2e:26:0e:4b:59:f1:17:32:6c:ba:
68:07:79:4c:84:77:66:d9:5f:15:7c:ba:f4:01:44:
ef:70:07:5b:82:fa:e8:01:8b:71:10:44:39:8e:90:
b5:59:c2:94:bf:e4:6f:ee:96:0d:22:e3:5b:75:81:
09:1f:37:54:c0:be:e6:c7:f2:5f:85:71:37:78:17:
4b:00:30:8a:de:b0:9e:d2:5e:14:45:d4:c4:6f:49:
0b:0b:91:0c:90:52:76:7b:78:55:17:62:5c:c1:dc:
3b:d9:6a:b2:33:70:ea:c6:2e:b6:59:0e:16:84:d5:
87:3a:0c:44:c0:ef:88:8b:8b:a0:52:cf:3d:a2:5b:
40:cf:f9:3b:78:2c:fb:ba:3f:85:10:a9:38:ad:30:
03:f4:87:5e:e6:30:66:3f:4c:12:ed:e2:5e:cc:02:
f2:a9:cf:88:8c:86:48:70:c7:8a:db:ea:7b:ab:0a:
ac:66:db:b1:d9:c7:99:12:70:4a:e7:b8:e6:d6:e6:
6f:34:24:b4:ed:b3:f2:e4:46:b4:76:8d:e1:aa:58:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EA:4A:DE:E8:0B:06:51:9C:E4:0D:D3:D1:3F:28:BA:9F:57:59:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5b5f0c-3c3d-4e20-b035-056c7bf6d7d8/1/zepK3ugLBlGc5A3T0T8oup9XWVc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.250.0/24
91.227.208.0/24
185.64.72.0/22
IPv6:
2a03:1220::/32
Signature Algorithm: sha256WithRSAEncryption
1d:3b:3c:be:a0:45:7c:2f:89:25:57:d3:e8:c7:c0:36:ff:e3:
1a:6f:af:56:71:52:23:89:c5:4b:a8:55:a7:26:64:94:2f:20:
ca:82:8e:07:d2:06:07:b7:b7:99:97:1b:08:d4:99:5d:9e:11:
92:db:b3:e6:7d:8a:eb:99:8a:69:f9:28:97:a4:ae:e2:7b:5b:
91:ce:61:b1:6f:c6:08:a8:14:dc:3b:f4:67:ff:23:92:3b:ed:
06:47:d9:96:a5:f3:48:11:00:2f:6a:2b:e3:c5:2b:51:a8:58:
01:61:05:b4:af:d1:88:9d:fa:08:0d:22:6a:ae:27:c1:03:06:
90:b6:80:75:1a:7f:6f:a6:72:34:f1:7e:55:43:55:86:d0:9d:
18:40:b6:57:8b:14:1d:78:5f:f4:55:bb:b9:9e:d3:80:59:fe:
54:69:17:e7:21:11:b9:07:2d:a1:49:d5:2a:99:ea:3a:5d:7b:
80:60:16:17:76:59:58:a6:29:91:b0:a7:08:f1:be:16:fb:73:
4d:44:e7:a9:e5:0e:29:2f:38:1e:45:be:c7:66:35:bf:d9:e5:
30:e9:19:66:31:2c:cb:95:7f:75:04:06:5c:b2:58:44:6c:00:
39:8c:bb:a4:cc:73:16:6c:9a:d2:20:d0:e4:e1:d3:8b:91:a6:
de:60:e6:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:02:18 2025 by rpki-client