Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
File: gZypPRPsITWRKJWUxBdjrAcEbFQ.cer (raw, json)
Hash identifier: OeSiiyzT9KbfcmAe6XNCW7FutLIdoQ9QVAyxlOQPAS8=
Subject key identifier: 81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196EDA09719E67128E30158172E8BECEFD4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 12:17:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39243
IP: 194.165.54.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:a0:97:19:e6:71:28:e3:01:58:17:2e:8b:ec:ef:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 12:17:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=819ca93d13ec213591289594c41763ac07046c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b3:42:eb:ea:81:83:55:49:2f:c8:61:75:97:
d7:f8:ec:28:ff:1c:25:62:a0:a6:15:64:58:49:1f:
e8:52:9f:eb:66:ed:2e:e7:f8:4f:73:6e:0f:69:eb:
50:98:bb:7d:62:f1:a9:b0:6b:0c:95:a4:cf:af:3e:
58:8a:56:80:98:7a:02:c1:50:75:9b:79:85:09:ae:
20:91:f2:fa:1d:f3:fd:2b:5d:96:a2:5a:0f:ef:d3:
a0:cc:d6:05:69:80:86:ce:23:c9:14:55:83:77:0a:
c4:50:aa:f7:8a:eb:37:ea:54:55:f6:d9:25:4b:ab:
2b:0e:0c:83:62:07:6d:98:6d:c1:d6:d3:1e:4e:23:
b1:ef:bd:10:58:db:19:5c:c9:71:60:20:c7:e8:7a:
f4:d7:ef:4b:96:df:8a:73:f0:9e:bf:35:21:ab:2d:
42:90:f2:9e:51:5b:b6:01:c6:3c:52:52:87:eb:21:
42:3c:55:11:cf:9b:1c:2e:e7:c2:66:bd:31:87:f9:
f2:5c:78:50:f7:fd:c8:26:b5:a1:3e:4c:07:74:68:
e7:96:c2:4f:97:7b:f1:f3:ec:74:86:09:41:4d:e3:
49:a6:15:95:27:a6:fb:38:7a:8d:fc:ec:48:3b:08:
3f:f9:61:82:78:d7:2f:13:4d:c2:ee:5d:17:7b:20:
fe:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.54.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39243
Signature Algorithm: sha256WithRSAEncryption
13:a3:20:29:d9:a3:66:27:33:63:aa:45:61:fa:5c:e1:fe:f7:
ac:bd:eb:d6:a3:51:65:95:8c:9e:00:5a:1c:3b:47:59:c2:82:
e8:a8:cf:db:d8:6b:b5:e6:82:85:81:85:36:9b:e3:52:23:4c:
51:b8:02:c2:0f:97:d1:de:fb:94:23:65:79:60:7e:01:c9:a7:
f5:f0:9e:3e:ff:e8:0f:e1:66:8d:31:66:85:fc:c7:b8:ad:b8:
06:f5:ed:d0:f7:51:c8:e1:30:af:58:a6:fd:e9:8b:2c:b1:e8:
df:bd:71:b3:04:53:6e:e7:48:c7:20:4c:4a:b6:a1:b9:54:fa:
80:06:b5:30:56:15:f2:9d:7a:62:d0:46:f4:08:9f:04:61:9f:
5c:8a:aa:35:6f:be:6a:02:75:3f:8b:e9:36:95:99:63:7f:ea:
82:e6:39:7a:4e:8e:e7:77:2c:40:7e:4d:35:6d:01:d0:b2:18:
7c:7e:f6:e5:f8:56:08:d7:fb:17:28:09:0b:70:e0:24:79:09:
dc:02:bf:e6:d7:b7:25:a8:b9:77:f8:0e:7b:c6:99:3c:cf:5d:
ed:cb:30:5c:8c:37:9b:0f:0c:9d:01:e1:f4:f5:26:b1:d2:45:
4f:3d:0e:64:48:0f:83:4c:09:56:b5:68:fd:b1:93:f1:3a:ea:
83:d7:af:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 22:07:19 2025 by rpki-client