Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
File: zQPRPdJvAESig_xqEedWoqK1aRs.cer (raw, json)
Hash identifier: OrUdzxoLUWWPl2eCGytNGob6TIXQA2p3XCkODoL0pOY=
Subject key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019652ECFFF5407316CDA01B0B8E306AF9B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 20 Apr 2025 11:19:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.227.79.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:ec:ff:f5:40:73:16:cd:a0:1b:0b:8e:30:6a:f9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 20 11:19:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:13:45:9c:9b:34:1f:76:df:2b:8c:f6:60:8a:
12:ee:e1:1b:4b:95:5b:8e:d3:e8:57:4d:22:a8:0f:
20:c9:67:c6:be:6d:9c:08:1c:aa:aa:06:c2:46:0b:
fe:a6:2a:74:a2:9e:f8:5f:57:a0:19:aa:35:11:ea:
48:f3:90:55:66:61:57:4e:71:fb:3e:b5:ca:aa:85:
76:f1:86:36:30:cd:cb:2e:bc:bb:d2:e6:30:fa:e9:
8a:9e:d3:cb:a9:74:32:75:b9:b3:8b:c0:75:77:5b:
dc:71:29:f2:45:f0:9c:2c:5e:72:2d:35:20:3c:fd:
f8:0c:f9:aa:71:10:a6:ae:df:dc:71:ef:4e:43:92:
9c:a6:e7:72:0f:4e:54:9b:e2:ac:75:3a:8a:79:11:
92:6c:b2:89:5e:25:44:48:80:5e:80:b5:0b:bc:aa:
91:29:ae:c3:c0:11:d4:57:22:ad:89:b2:9d:d8:98:
34:a6:80:33:56:51:c2:83:3f:60:e5:b5:2d:75:f3:
d4:d0:59:bc:d6:44:31:1b:b3:b0:44:85:ed:ac:51:
6b:59:1f:a3:c8:ca:1c:cf:13:7e:1c:5c:fc:6f:9d:
f8:b1:1e:8e:c2:49:7a:30:2b:0f:4a:98:c5:67:53:
c0:59:a9:84:53:42:8d:81:3d:53:a7:05:59:f4:f9:
6c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.227.79.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:a6:50:e6:ea:f5:5a:38:4b:f4:df:2e:f2:26:aa:cb:63:a0:
e2:ed:5e:35:34:0f:7f:13:b7:31:3a:c8:bf:73:85:7d:19:de:
91:f8:0b:73:4d:f1:ec:40:15:ae:89:9f:40:1e:5e:15:a9:3c:
e9:49:ff:9e:b2:b3:fc:34:49:07:c6:c6:a3:85:b0:62:7b:4b:
76:cb:3a:cf:ba:5e:1c:f3:9b:19:38:a6:f5:a6:38:16:3f:df:
43:f6:8a:f3:21:8b:c1:83:04:c8:3e:51:cd:31:13:aa:4c:c7:
9d:f7:70:d1:c0:09:83:58:c0:dc:d6:51:9f:70:31:88:a4:e7:
38:58:33:cf:96:0a:c0:13:d9:6b:f2:74:42:53:7b:58:ab:36:
9a:74:02:c2:51:0d:72:56:54:77:0d:71:78:52:2e:72:97:57:
98:a4:2b:d9:60:91:4c:08:57:13:3e:9c:76:75:50:a0:ad:19:
d3:1e:c5:d5:0c:9f:b5:ec:b9:f8:e8:f9:b2:ad:5a:f2:cb:97:
e5:20:ce:59:77:fd:6a:14:20:f4:9b:fa:45:91:e2:e2:e3:a4:
8a:d7:c1:4e:76:44:98:1d:2c:42:bd:67:66:fa:05:55:17:9e:
e5:83:6a:68:3d:e5:65:c0:b1:8f:f0:31:70:25:3b:33:55:84:
2a:ed:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:00:51 2025 by rpki-client