Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
File: zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer (raw, json)
Hash identifier: gCZU3WrpD31yiRGog1QYmWdJjnTgf9evcwEjNaesI1k=
Subject key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942825A6B8C55777E41C67641133E935BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:52:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.145.152.0/22
IP: 80.83.80.0 -- 80.83.89.255
IP: 80.83.91.0 -- 80.83.95.255
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:a6:b8:c5:57:77:e4:1c:67:64:11:33:e9:35:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:52:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ce:59:2f:2b:10:21:2e:cc:6f:8e:76:87:05:
61:0c:7a:81:26:8d:a3:e7:ba:17:cc:47:c0:e9:42:
29:0c:9f:c2:cb:ad:a0:c4:d9:9b:d9:b7:9e:4d:7d:
4a:9c:7d:18:60:8b:c6:e2:01:ee:90:2b:34:8a:79:
97:39:e7:52:a0:cd:69:1b:68:98:82:55:f1:8f:dc:
b5:78:94:43:50:cc:6a:01:96:b5:c8:81:25:1e:96:
77:f4:81:91:80:c8:64:18:9d:21:5d:d1:aa:8f:e7:
4c:f1:4d:86:a1:f3:be:bb:ca:e0:d7:d9:a9:3c:d4:
84:11:26:05:cf:32:b4:01:f4:a5:58:47:db:3a:5e:
46:f2:ab:6a:93:97:5a:a6:5d:d4:cc:ec:c8:8a:57:
27:3b:25:f5:39:2a:0d:c4:c2:cd:cd:6c:a5:62:a6:
72:8d:b0:6b:37:e7:44:0b:50:34:34:fa:39:fd:31:
b7:8e:ce:4c:a3:e7:8a:68:04:1f:28:f3:9b:81:91:
97:bc:ed:1c:9a:e5:65:9a:eb:81:a0:00:27:b8:01:
ba:17:3d:c4:b2:a8:d5:fc:5c:6b:d9:81:fe:7c:c0:
a5:5a:a6:f6:a5:30:b6:05:81:e0:db:68:7d:f5:a6:
24:d7:de:fb:8e:4a:be:1f:6d:6c:89:6e:13:b4:b8:
1e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.152.0/22
80.83.80.0-80.83.89.255
80.83.91.0-80.83.95.255
Signature Algorithm: sha256WithRSAEncryption
66:d8:7f:14:df:6d:11:9b:67:bd:fd:53:b7:15:28:1f:24:ef:
72:77:89:dd:87:8f:c3:0b:a8:dc:db:a4:75:3c:50:53:70:6d:
23:4d:fb:02:5c:7b:98:bf:0e:64:74:34:a2:c9:4a:7a:12:1a:
07:84:f3:0c:56:05:58:be:79:79:f2:3d:92:e1:49:17:24:80:
ba:45:2d:98:92:7d:fe:cc:32:da:a7:4e:46:39:43:42:50:02:
7e:f6:f5:38:10:91:5a:e4:a9:fb:17:01:6d:07:65:f8:97:bc:
45:ce:3a:7a:0f:d0:11:43:8b:68:c5:78:f8:e8:e1:a5:85:0c:
cb:e8:cb:02:47:8f:21:2c:7d:94:cd:f2:c8:dc:76:d6:3e:2d:
5e:34:07:c6:ac:5d:43:3f:68:5e:a3:c1:70:cf:78:25:91:a7:
24:79:14:d0:7e:52:2f:01:a1:ea:b1:a3:c0:2d:84:63:68:5f:
4b:50:1c:e9:7b:6e:f0:76:53:be:de:26:53:84:17:20:33:7f:
b0:6e:b8:0d:04:8d:45:7f:c8:d1:2f:52:df:d3:9f:8e:90:78:
a3:f9:37:ba:42:3f:aa:78:a1:47:ff:7c:04:2b:2c:df:d0:9b:
35:e6:7e:41:7f:2f:68:b3:7e:48:06:e3:c2:b2:be:ec:a6:2b:
2f:19:83:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:44:19 2025 by rpki-client