Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer
File: nZibOZjhn8APhnDPbJ10AXFc808.cer (raw, json)
Hash identifier: +8KAZ7pj07MRkx7Qv9OLh6LIsi6D2y21eIVV4STbBew=
Subject key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01967C56DAD82A6013BB74AE95972246C147
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Apr 2025 12:19:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 13121
AS: 33817
IP: 46.231.224.0/21
IP: 91.195.74.0/23
IP: 91.235.68.0/22
IP: 185.179.212.0/22
IP: 193.28.184.0/24
IP: 194.50.81.0/24
IP: 213.169.64.0/19
IP: 2a01:6880::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:56:da:d8:2a:60:13:bb:74:ae:95:97:22:46:c1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 12:19:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c1:52:73:28:09:99:83:4d:a0:1e:4a:7d:3b:
f1:2e:4b:de:43:fd:cb:b0:cd:1b:91:83:69:98:dd:
a6:51:e6:59:f0:41:64:b7:b2:df:ee:35:a1:b0:d2:
26:f7:a6:b9:0e:1c:20:6e:d7:cd:2a:55:5b:dc:ef:
3f:b7:b8:6a:54:d8:c5:47:57:e8:64:b9:20:52:c0:
31:06:6c:11:9e:3e:d4:a9:df:b6:58:1d:72:e8:64:
8f:7b:af:c1:f2:aa:85:bf:49:64:77:ca:d2:dd:ce:
1f:d7:67:5d:39:d4:84:8e:ca:14:a9:73:ad:b2:53:
8f:0a:81:10:cf:40:78:a4:17:c5:12:60:47:ee:ac:
c3:0b:ed:5f:b5:98:50:38:70:73:d9:ca:44:f1:67:
f7:5d:e0:2d:98:ec:55:1c:7d:f1:a5:a2:4e:17:e3:
19:2b:f2:c0:4e:27:70:fd:f0:d7:ea:b2:98:e4:27:
a7:12:cf:af:16:8a:e4:82:fb:f5:86:16:de:3f:f0:
9c:00:ce:5c:5e:b0:79:03:3a:74:32:75:74:af:8f:
89:13:31:9f:c0:63:32:d2:6a:c8:dd:6f:c2:e3:d4:
c6:1b:3c:70:6a:0d:bf:b1:3c:b7:c3:c5:0a:07:b0:
6d:5c:ed:d1:11:7c:dc:da:fb:5c:08:56:c1:04:7c:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.231.224.0/21
91.195.74.0/23
91.235.68.0/22
185.179.212.0/22
193.28.184.0/24
194.50.81.0/24
213.169.64.0/19
IPv6:
2a01:6880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13121
33817
Signature Algorithm: sha256WithRSAEncryption
a9:8f:86:3f:e1:b6:cc:ff:23:5b:fa:3a:25:14:19:90:42:0a:
16:c4:6c:87:60:7b:6f:bd:75:99:86:4f:1f:39:43:72:fc:05:
c8:3f:58:22:c8:e1:e1:74:4e:7a:65:ce:7b:4f:f2:6a:66:51:
df:29:16:f8:11:30:81:1f:38:09:e0:38:b0:16:be:91:65:5a:
d8:90:9c:0f:16:16:ac:2b:a1:a6:18:b5:0d:f3:57:45:00:62:
5a:24:5f:02:ad:07:4c:48:fd:8b:ba:7e:5e:ac:14:fb:1b:a3:
42:86:f1:c6:6d:da:c9:92:01:8b:f9:72:01:0b:92:cd:8c:bc:
2a:82:57:43:ad:05:e8:12:69:19:18:39:df:3a:d2:ef:81:99:
1c:9e:96:d2:e6:72:32:f3:34:2f:3b:70:ec:e7:78:cd:82:7c:
ae:6c:71:87:3a:2d:ac:75:1f:b7:a9:f8:de:bb:76:43:fb:b3:
18:ea:25:52:f0:a1:1e:52:ab:9c:99:a3:83:64:da:ac:35:f8:
51:32:26:6b:7f:a4:f7:c6:77:47:db:f2:e1:f1:ab:cf:18:f7:
34:75:3d:4a:cd:0a:8e:d3:c7:1c:7f:51:5c:3a:86:82:93:6d:
96:51:a2:af:f1:18:6a:3a:9c:64:ba:f0:09:bb:48:13:b4:b3:
02:4c:12:90
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Apr 30 17:44:38 2025 by rpki-client