Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer
File: z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.cer (raw, json)
Hash identifier: R2cHj0eef6VtW+cIEzO5ajBDsFF/PGrr1+pKPl/h2w4=
Subject key identifier: CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DDB3138833D2DE9B4AD62F5DB8279
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48782
IP: 91.212.30.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:db:31:38:83:3d:2d:e9:b4:ad:62:f5:db:82:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfc025a9d55bfd643757da4d499dce17201774d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:19:27:55:60:9f:a8:25:a1:86:4c:a9:97:
6e:d7:88:e8:35:e8:9a:70:d9:53:a3:55:55:c9:b6:
b9:9c:59:52:75:77:93:98:aa:70:c3:62:2d:d0:3b:
76:38:b1:1a:99:b7:8c:49:38:05:32:c0:de:9f:d0:
87:cf:4c:7a:15:84:2c:c2:cd:a1:c0:b6:c5:86:7b:
ad:a5:46:d6:00:c0:18:3b:04:b2:7e:42:e7:61:fb:
b7:a9:f7:ec:c3:f7:5f:3e:f6:67:af:77:58:34:a7:
13:9d:01:99:8c:07:ad:03:71:49:ab:cc:53:2e:60:
9e:19:5d:ed:da:57:9e:f0:a4:3f:87:06:55:28:bb:
f8:b3:83:2a:9a:06:2a:e7:56:7f:6f:5a:31:cf:65:
d6:90:52:e6:ed:15:e3:0f:28:38:0d:40:7a:da:8b:
03:7b:40:26:6b:7c:55:1b:df:b2:c5:8e:55:48:59:
33:7a:91:50:aa:4a:98:dc:47:94:bd:cb:e7:ad:02:
9a:09:88:5c:b2:08:78:26:cb:b1:b7:a3:86:f6:0f:
56:a9:e4:36:60:9c:a2:ed:14:41:83:85:7e:21:c1:
59:8d:25:40:d2:fd:60:74:46:d8:0e:a2:fb:e6:14:
22:b3:f1:93:d3:98:9a:3f:3d:7e:bc:f6:2f:c5:40:
7f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C0:25:A9:D5:5B:FD:64:37:57:DA:4D:49:9D:CE:17:20:17:74:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/fda298-02c7-4d71-8ad3-951fd75ac9a2/1/z8AlqdVb_WQ3V9pNSZ3OFyAXdNI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.30.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48782
Signature Algorithm: sha256WithRSAEncryption
59:d2:dd:98:dd:25:0a:e4:f8:17:88:77:a9:26:96:86:35:84:
a2:48:b1:f3:3f:1b:9d:80:07:ac:c5:aa:04:51:32:bf:77:fb:
dc:94:51:9e:38:24:ca:db:8c:74:fa:c2:2a:16:4c:8b:2e:02:
27:59:45:40:fd:06:7a:c3:fb:45:94:a4:5d:6e:80:77:16:f1:
ab:3f:6c:d4:aa:2f:2f:10:63:ec:9f:ab:23:49:99:c6:30:54:
49:6c:4d:d3:07:54:17:c5:d6:82:f3:be:74:18:dc:f0:c3:36:
09:89:41:53:49:dd:c2:3a:c5:69:b7:83:8d:c3:00:73:51:d9:
e6:41:cf:f6:0d:25:f4:bc:7c:27:c2:51:2b:a9:b1:c4:9e:b0:
9f:bf:b7:f5:df:da:89:83:f9:ef:a8:21:e1:20:83:54:d9:c9:
d9:e6:2a:4e:86:9e:17:a5:10:1b:b3:c0:9b:56:0a:6f:18:5d:
a7:1d:dd:85:2b:d8:d1:8c:96:6c:7d:dc:8c:ea:3d:49:49:8f:
7a:b9:cc:4e:5e:d1:fa:43:af:e3:0d:54:8a:1d:52:15:a5:0e:
22:e7:d0:45:4f:78:3e:fe:06:d9:aa:81:73:f2:5f:99:76:cb:
f8:ee:7b:98:3c:22:e4:12:8d:85:fa:57:4d:b6:6c:74:2a:64:
26:5d:ec:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:18:02 2025 by rpki-client