Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zf9bPNry6tG8MwlBG_lJLNmHr7o.cer
File: zf9bPNry6tG8MwlBG_lJLNmHr7o.cer (raw, json)
Hash identifier: 7ixQuyXCRkYsismw47Ap0gUe2ptOAMheSKWvJpllflI=
Subject key identifier: CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D8C751D55808E9F7E26042F857D81
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214217
IP: 193.246.128.0/20
IP: 193.247.112.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 15:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8c:75:1d:55:80:8e:9f:7e:26:04:2f:85:7d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdff5b3cdaf2ead1bc3309411bf9492cd987afba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a9:80:d0:05:84:c7:e3:c4:bb:b9:53:f5:b3:
86:c0:ff:dc:5a:91:4e:89:2f:93:63:f3:d4:ba:9b:
db:64:c8:5c:27:8f:83:8a:64:21:d1:a9:84:74:bc:
17:f5:d0:dd:13:67:82:ad:13:25:0a:73:c1:97:0e:
17:8a:0e:d2:85:ef:fc:71:54:e5:fc:85:10:e7:12:
48:99:90:1a:52:12:99:7d:a2:f2:8d:c4:6e:1b:4c:
f4:56:5b:78:2c:4e:76:71:8d:e4:19:ce:b2:dd:f8:
17:5f:88:7e:05:a0:43:3b:25:9a:fc:dc:58:20:f0:
5f:53:fc:3b:c2:22:43:12:92:58:ba:74:5a:10:35:
aa:6b:ff:10:9e:39:6d:03:d2:48:62:5c:ce:a1:f1:
5a:ac:0d:38:8c:90:cd:f7:29:41:c1:f0:33:65:df:
60:e9:f6:2f:38:23:64:7c:7c:bc:b9:47:bb:10:72:
d8:e3:a2:18:58:31:eb:cb:72:de:8f:53:22:19:8f:
90:88:85:be:b3:04:eb:c5:68:59:cc:68:4c:80:f9:
03:47:3d:e0:c3:61:3a:e4:53:16:7c:80:96:38:55:
b2:02:33:c6:ff:e3:2f:87:cd:ef:14:f2:6b:a4:4e:
36:54:d3:eb:8a:54:bb:22:54:04:60:0b:12:30:9b:
40:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FF:5B:3C:DA:F2:EA:D1:BC:33:09:41:1B:F9:49:2C:D9:87:AF:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/b76d34-5f07-42d8-a131-a8781add2423/1/zf9bPNry6tG8MwlBG_lJLNmHr7o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.246.128.0/20
193.247.112.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214217
Signature Algorithm: sha256WithRSAEncryption
1d:86:af:ef:ea:84:6e:84:da:ca:a1:cc:e2:fd:da:97:db:d4:
af:47:93:2a:61:89:25:25:e6:8c:fb:a0:ee:58:89:db:e3:19:
a1:3d:ec:33:dd:04:cf:24:46:aa:13:f1:08:82:ed:ee:bb:65:
7c:9c:0e:83:fc:74:cc:30:da:d9:ee:35:5e:f2:d2:dc:40:4f:
91:d1:11:09:54:21:8c:de:00:f3:76:79:40:61:ce:d6:ff:43:
87:aa:75:82:85:9e:ba:71:92:79:a5:6a:16:b5:3d:56:7d:7a:
9d:63:b9:7b:ca:02:d9:e1:50:7e:7f:aa:3d:d1:94:e0:62:98:
7b:32:3e:6b:b0:ce:2f:99:5b:d4:1e:ec:56:5a:92:0c:26:76:
48:a1:79:54:f7:de:42:3f:58:94:aa:ad:69:87:e4:bd:90:83:
98:24:cc:ba:40:23:08:18:39:4b:03:cb:27:62:a4:fd:20:75:
a3:a7:fe:9a:81:d2:02:c1:af:90:41:86:71:ce:57:6f:b2:b4:
c5:d3:89:63:0e:22:60:87:f8:17:db:d7:f8:9d:18:8b:71:e5:
37:95:4e:4b:f6:6f:42:d8:f5:0c:84:c6:d4:e9:46:44:f5:07:
18:0a:ae:fd:8c:88:de:14:0d:a8:89:e4:00:bf:16:b8:a4:86:
cf:22:94:3a
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQijYx1HVWAjp9+JgQvhX2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGZmNWIzY2RhZjJlYWQxYmMzMzA5NDExYmY5NDkyY2Q5ODdhZmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyamA0AWEx+PEu7lT9bOGwP/cWpFO
iS+TY/PUupvbZMhcJ4+DimQh0amEdLwX9dDdE2eCrRMlCnPBlw4Xig7She/8cVTl
/IUQ5xJImZAaUhKZfaLyjcRuG0z0Vlt4LE52cY3kGc6y3fgXX4h+BaBDOyWa/NxY
IPBfU/w7wiJDEpJYunRaEDWqa/8QnjltA9JIYlzOofFarA04jJDN9ylBwfAzZd9g
6fYvOCNkfHy8uUe7EHLY46IYWDHry3Lej1MiGY+QiIW+swTrxWhZzGhMgPkDRz3g
w2E65FMWfICWOFWyAjPG/+Mvh83vFPJrpE42VNPrilS7IlQEYAsSMJtALQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFM3/Wzza8urRvDMJQRv5SSzZh6+6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2I3NmQz
NC01ZjA3LTQyZDgtYTEzMS1hODc4MWFkZDI0MjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvYjc2ZDM0
LTVmMDctNDJkOC1hMTMxLWE4NzgxYWRkMjQyMy8xL3pmOWJQTnJ5NnRHOE13bEJH
X2xKTE5tSHI3by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQEwfaAAwQDwfdwMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwNEyTANBgkqhkiG9w0BAQsFAAOCAQEAHYav7+qEboTayqHM4v3al9vU
r0eTKmGJJSXmjPug7liJ2+MZoT3sM90EzyRGqhPxCILt7rtlfJwOg/x0zDDa2e41
XvLS3EBPkdERCVQhjN4A83Z5QGHO1v9Dh6p1goWeunGSeaVqFrU9Vn16nWO5e8oC
2eFQfn+qPdGU4GKYezI+a7DOL5lb1B7sVlqSDCZ2SKF5VPfeQj9YlKqtaYfkvZCD
mCTMukAjCBg5SwPLJ2Kk/SB1o6f+moHSAsGvkEGGcc5Xb7K0xdOJYw4iYIf4F9vX
+J0Yi3HlN5VOS/ZvQtj1DITG1OlGRPUHGAqu/YyI3hQNqInkAL8WuKSGzyKUOg==
-----END CERTIFICATE-----
Generated at Thu Mar 13 01:38:31 2025 by rpki-client