Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer
File: zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.cer (raw, json)
Hash identifier: dI94LmAipbgDvTScEcaTt8LZARm8YE7u6udqiqOJAfc=
Subject key identifier: CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747F5FC8E961B9737B2F005AB64A884
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.72.164.0/22
IP: 2a05:3b80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f5:fc:8e:96:1b:97:37:b2:f0:05:ab:64:a8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cea02c07797fa203a1e2493ba0dd80199ed9be05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:fa:9f:ae:97:c0:56:cf:20:8c:4f:6e:e1:
ec:92:d2:cf:6b:14:12:4b:22:61:41:fe:aa:90:84:
db:18:7b:42:d7:17:8c:e8:c6:b6:fb:71:69:03:82:
05:d8:32:f5:6c:40:b0:61:9a:77:0e:02:d3:b7:7a:
81:37:ea:5e:ab:7f:b1:fd:aa:0e:59:7e:e2:cc:9a:
7a:9a:8f:a1:4c:f2:48:e6:38:59:49:93:78:4b:ac:
f9:a5:82:8d:e0:82:21:8b:5f:50:e5:c3:69:92:3c:
47:5e:77:b6:10:17:11:13:c3:05:71:d9:61:13:c2:
f3:33:87:8a:b1:59:e7:e1:d1:2b:f1:fb:fd:76:7d:
cd:e0:6f:b7:22:72:42:0c:ab:25:e9:a0:3d:af:ba:
0a:f6:82:6f:be:ba:03:6a:25:21:8d:05:22:fd:99:
5b:8b:63:f3:a7:9a:36:bf:df:19:f9:30:9d:39:0c:
56:6b:c6:59:86:d8:8c:c5:6b:8c:52:7c:ae:9d:ee:
3f:d9:93:05:33:b1:af:a8:0a:33:ad:c3:a9:33:9f:
c9:ad:ef:30:2f:97:e5:87:02:d0:a1:9d:c5:d1:29:
c3:e7:bc:8a:b4:0c:21:b1:d2:1f:ab:90:d0:2d:5a:
b8:5c:33:74:b6:f7:e4:65:20:d8:f6:17:25:78:f4:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A0:2C:07:79:7F:A2:03:A1:E2:49:3B:A0:DD:80:19:9E:D9:BE:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e2dc5b-ceb2-435c-aba4-7ef1b9159eb6/1/zqAsB3l_ogOh4kk7oN2AGZ7ZvgU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.164.0/22
IPv6:
2a05:3b80::/29
Signature Algorithm: sha256WithRSAEncryption
4f:61:05:0c:06:ff:a4:61:2f:39:7f:52:d5:75:7c:73:67:f3:
bb:85:aa:be:e9:28:43:d3:93:9a:d8:7d:e5:b1:a7:72:33:bc:
54:11:8a:12:49:ea:05:78:e4:dd:6d:c8:56:79:61:39:f8:80:
da:e6:f6:08:e7:16:96:95:f6:4d:b2:89:b5:02:0a:11:99:78:
70:ef:ca:1f:7e:b6:40:12:6b:71:dc:99:6a:0a:0c:47:88:fd:
51:e5:68:ab:43:02:1a:5e:b2:94:ec:16:29:ef:25:1f:c1:bd:
ae:47:9f:87:4e:e5:c6:ae:1d:3a:87:58:6f:9d:b7:36:c4:c1:
96:4c:07:b6:4d:dd:fb:9a:df:c4:29:e1:5f:8b:d4:a0:b5:82:
7c:f0:17:15:9f:0b:1f:fd:60:6f:21:2b:0c:e1:ea:dd:ca:2e:
03:99:d3:26:7d:d7:74:55:7a:17:56:62:75:10:e1:31:a5:c0:
a3:72:36:21:58:12:c2:7b:1d:6d:d0:cc:36:82:70:e0:ec:22:
ef:9d:2e:ef:ef:70:71:90:b2:e3:db:63:af:18:c3:20:cf:a8:
cd:e8:37:40:03:b8:1a:d2:b0:71:4d:cb:da:44:04:ae:00:fb:
61:5c:eb:0e:2f:9c:58:00:23:95:2d:31:f7:f2:4d:32:87:37:
9f:8b:83:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:48:06 2025 by rpki-client