Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zfyNbNSfmv4mTVQumpYU89SsHJ0.cer
File: zfyNbNSfmv4mTVQumpYU89SsHJ0.cer (raw, json)
Hash identifier: ILQYFVBrX/EwNVQMjZnQ8Voq7TthQZnS3kK0b04bIrs=
Subject key identifier: CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E32FF4AE1C898365D4F3C1C4A43E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15654
IP: 212.28.0.0/19
IP: 213.143.128.0/19
IP: 2a02:e68::/32
IP: 2a03:2580::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:32:ff:4a:e1:c8:98:36:5d:4f:3c:1c:4a:43:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdfc8d6cd49f9afe264d542e9a9614f3d4ac1c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:53:ac:4c:bd:60:49:7b:4d:cb:a3:19:1b:94:
89:4e:12:f4:ac:db:95:07:0c:cc:05:0a:5f:5d:cd:
47:6f:94:dc:56:82:b6:95:f5:45:b6:39:52:72:68:
f9:37:5d:80:49:f8:8a:25:9d:4b:c5:b6:d5:35:93:
bc:dd:7d:67:26:af:69:fa:80:a4:cf:73:12:84:81:
59:63:e8:00:ac:96:a0:23:6c:5b:80:8e:e4:0b:4d:
42:98:3b:95:4a:50:11:7e:c8:55:0b:25:e1:de:d3:
b5:3d:4f:17:50:db:56:55:00:79:69:70:f3:5c:9d:
4d:cf:3a:d7:fa:22:1f:0d:a4:e4:78:99:38:dd:f8:
c4:98:28:53:9f:03:9e:59:04:6f:99:a6:62:13:11:
8e:82:04:3f:5f:dc:4e:92:17:42:80:2e:19:3d:a0:
be:37:9d:46:4e:7d:43:03:5d:7f:75:30:ab:a8:0c:
95:2d:9c:25:0d:88:e6:86:01:bc:82:d6:07:53:6e:
98:18:17:45:ff:31:76:83:5b:0f:e2:c6:80:d3:0a:
a6:51:4a:33:b2:f5:57:d6:06:e1:12:ce:45:6c:bc:
71:36:43:5c:09:bc:fd:7d:1f:02:82:dc:02:93:fe:
a5:bd:5e:3e:28:35:ba:05:cc:d7:fa:cf:ff:77:eb:
e2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:FC:8D:6C:D4:9F:9A:FE:26:4D:54:2E:9A:96:14:F3:D4:AC:1C:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/aab915-d5fd-4503-b3b5-f26099e11483/1/zfyNbNSfmv4mTVQumpYU89SsHJ0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.28.0.0/19
213.143.128.0/19
IPv6:
2a02:e68::/32
2a03:2580::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15654
Signature Algorithm: sha256WithRSAEncryption
44:7a:a8:60:65:6d:f8:65:d3:27:81:20:15:cb:6e:3c:93:0f:
c3:ee:5d:37:21:54:0b:33:d6:4e:c2:ac:54:ab:42:bc:74:32:
60:de:0f:e2:01:9c:0c:19:47:9f:52:2a:8b:32:21:04:46:44:
e7:d3:e3:31:ee:f2:9d:e8:f4:d4:9d:10:72:88:5d:3c:cc:5c:
f1:5a:17:19:d3:7e:54:b9:fe:82:69:bc:dd:eb:d8:a9:19:f5:
71:d6:73:15:92:69:dd:de:d2:08:19:b7:66:82:17:8d:c9:cb:
75:15:ea:58:a1:57:93:c2:c0:0d:8e:8b:b4:a4:8f:36:35:f1:
84:c2:32:24:de:66:87:78:9b:70:32:cc:d1:92:7c:9f:69:bd:
be:67:75:84:33:a7:74:e1:eb:4f:76:74:3d:1b:72:e2:04:54:
a9:5d:9a:a8:6f:c3:cf:82:51:c3:12:e2:6e:96:9d:d0:31:a8:
ed:28:32:be:0d:c9:85:a6:63:76:47:d4:98:f3:20:0c:fd:c7:
f1:0b:35:f5:74:ef:b0:33:13:4c:54:76:b8:76:49:93:f6:e1:
17:87:35:8b:a5:1d:b2:2e:2d:59:06:6e:cf:f7:c2:7b:12:29:
76:86:8f:a0:58:52:6e:93:4f:58:8b:66:8f:bc:c6:65:70:d8:
5b:1b:d0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:45 2025 by rpki-client