Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer
File: zlY2BiTMG0xJ2nK8Ml9btqtNgwA.cer (raw, json)
Hash identifier: HOUH1lRrU7u71geSQhGQBsYjwMJFcQewf+Mpc4eIUAM=
Subject key identifier: CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E223C4AFD51DBBB8D7A26C174B4E1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25530
IP: 62.113.32.0 -- 62.113.57.255
IP: 185.171.80.0/22
IP: 2a0a:b100::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:22:3c:4a:fd:51:db:bb:8d:7a:26:c1:74:b4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ce56360624cc1b4c49da72bc325f5bb6ab4d8300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:68:e2:64:4e:20:68:d2:60:a8:ec:35:47:
c0:a3:f7:23:63:f3:8b:ab:25:37:08:c8:05:9f:c1:
f7:83:d3:d1:0f:41:0b:aa:15:14:a2:b5:d9:03:ad:
69:21:1d:fb:01:8f:7f:3b:e5:69:79:67:ef:d9:12:
44:00:da:e0:18:64:8f:5c:5a:12:9d:94:eb:2a:7c:
a5:96:be:8e:c1:15:cb:9f:09:ce:7a:d5:85:d6:20:
fe:18:a1:21:26:49:e1:14:cb:9c:40:83:a4:19:46:
f0:84:8c:36:3c:57:92:9e:e2:13:1e:d0:85:85:69:
c6:ee:1f:bb:71:a4:9a:09:c7:0c:02:95:6a:34:81:
0a:64:5e:0c:fd:79:3b:27:d5:60:8f:d2:ab:93:f0:
21:19:57:f2:c3:e7:60:96:8f:e9:13:fc:8b:27:46:
3e:57:06:ce:d9:18:da:91:a9:d1:d7:bc:9b:ef:72:
56:6c:51:9c:ef:4b:6a:9a:0f:78:80:80:35:ce:71:
7b:32:13:fc:ff:23:9f:8f:3f:a2:b4:1b:9c:02:a2:
d8:02:79:c4:da:f2:32:16:ad:a5:1c:e7:72:34:b7:
16:bf:06:90:96:8c:21:ef:61:64:1d:a2:b7:af:0b:
3e:bb:3e:5b:c7:a3:34:d9:fb:95:31:e5:39:2c:cf:
b4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:56:36:06:24:CC:1B:4C:49:DA:72:BC:32:5F:5B:B6:AB:4D:83:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9577f8-b8b8-4994-b855-a98ef3008580/1/zlY2BiTMG0xJ2nK8Ml9btqtNgwA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.113.32.0-62.113.57.255
185.171.80.0/22
IPv6:
2a0a:b100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25530
Signature Algorithm: sha256WithRSAEncryption
47:70:e5:97:0a:4e:d2:3e:4b:2f:3c:7e:a5:18:52:c6:5e:ce:
53:83:30:ba:d1:e2:12:3e:07:03:ba:bd:96:00:0b:d9:c5:7f:
7d:7f:aa:80:e5:77:7b:3c:c5:dc:f5:36:0d:ee:ce:e3:7f:db:
cb:a3:a4:8c:71:da:35:a9:94:88:d4:02:7f:df:0d:bc:9b:01:
b4:18:57:14:93:99:64:b8:32:2d:4b:1c:f6:93:ec:85:f7:41:
97:15:04:84:2f:b5:16:87:ca:e1:4d:76:4a:ce:c5:91:71:b2:
c1:e6:22:2f:22:1f:4f:28:1e:d6:da:32:94:31:37:ce:ff:cd:
c6:cc:f9:db:4f:84:f8:d3:f6:4a:f1:72:70:0e:f0:79:c9:e4:
36:b3:66:2b:28:88:96:21:9f:a1:d7:13:87:cf:26:53:67:40:
70:97:d6:94:aa:4e:50:a7:8f:6d:53:a0:31:84:cb:07:73:89:
65:a2:e7:80:35:57:7b:d0:ac:d7:fc:07:db:0a:5f:74:71:5f:
cf:a0:be:a5:1b:03:23:c0:b8:64:00:65:d9:10:da:0f:d8:63:
ce:ed:05:6d:78:17:05:ba:fc:9b:e4:6c:55:40:39:23:13:89:
f3:20:54:56:04:44:37:ed:d1:8e:42:47:08:3d:d3:3e:e0:e5:
ce:01:10:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:30:49 2025 by rpki-client