Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z_TjgP46-q_fnIL8auXjPOAyirI.cer
File: Z_TjgP46-q_fnIL8auXjPOAyirI.cer (raw, json)
Hash identifier: gnsxR2nkxwEwnAFreRnL/8r+y74EFesV0t7j5s7yCas=
Subject key identifier: 67:F4:E3:80:FE:3A:FA:AF:DF:9C:82:FC:6A:E5:E3:3C:E0:32:8A:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F915D3EF1FA6377FD8D52391521287
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:05 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 194.242.35.0/24
IP: 195.20.132.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:15:d3:ef:1f:a6:37:7f:d8:d5:23:91:52:12:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67f4e380fe3afaafdf9c82fc6ae5e33ce0328ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a1:52:15:6e:41:51:40:1b:c5:47:8b:9d:2c:
9a:cd:d1:98:fa:21:2a:ca:da:bf:bc:5d:30:29:2f:
f3:a2:b5:43:2b:25:7a:6c:de:66:f0:63:49:12:4d:
43:3c:db:13:e4:b8:1b:3b:cb:a5:14:73:b9:ba:bd:
1d:a1:eb:e7:a7:c7:a4:26:3e:9d:4f:62:3b:1c:db:
e4:0a:73:b7:05:c9:9d:28:07:3f:85:8d:27:6c:57:
bc:45:4e:b6:40:3e:16:0b:09:96:ba:fc:39:b2:3a:
f1:c4:9d:72:5e:94:bb:b2:b9:6f:8f:f1:3b:b2:6e:
3a:07:f6:03:a0:60:3c:c7:39:d4:b0:5b:1e:87:4e:
f1:a8:d8:6c:69:38:06:ea:3a:a7:4c:d7:01:a5:6e:
14:c9:4b:09:de:31:70:84:4a:aa:d7:fd:9f:b3:b4:
5a:f4:a4:2e:94:1e:96:36:94:f0:b1:df:38:b3:05:
c9:78:16:6b:31:ed:41:e8:9d:c0:a8:4c:8f:2b:fa:
43:a0:ab:97:c7:4e:08:6c:26:17:69:84:a3:68:7a:
4a:94:14:fb:74:35:b3:dd:17:df:b1:dc:dd:6c:95:
4b:8f:85:7f:4a:8c:2d:09:4f:ee:e9:cc:26:8c:6e:
71:dc:51:15:fa:ff:30:f0:b6:b1:04:f9:5b:89:2a:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F4:E3:80:FE:3A:FA:AF:DF:9C:82:FC:6A:E5:E3:3C:E0:32:8A:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/Z_TjgP46-q_fnIL8auXjPOAyirI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.35.0/24
195.20.132.0/24
Signature Algorithm: sha256WithRSAEncryption
60:22:b5:4e:2b:15:94:da:f7:04:76:71:68:cb:23:ca:a5:48:
b8:1f:fe:14:2a:5d:20:5b:a1:92:03:7e:94:8f:b2:b5:f5:5b:
83:fe:ff:38:7a:c2:93:3e:02:78:f0:01:9a:a5:a8:43:fe:da:
82:54:33:0b:b1:4f:84:6a:b8:0c:de:d2:8b:bb:c7:7b:ce:bd:
c3:93:19:ae:67:bf:70:74:b8:92:63:52:bd:7c:99:58:84:d3:
e5:34:e5:36:79:bf:5b:d1:c7:5b:5e:d3:8a:05:81:37:67:80:
df:25:6a:ce:7f:50:c7:04:9d:ea:86:ea:49:dd:4d:b6:24:12:
e6:43:c4:05:71:8c:96:69:20:ff:d7:43:7b:22:4f:82:ed:26:
d5:2e:32:8c:30:8f:67:4d:b8:5d:2a:43:25:15:5f:82:77:54:
1c:9c:28:98:f4:97:7f:d9:c2:1b:f7:e7:53:74:41:da:b8:dd:
bd:62:e8:67:4c:d0:eb:c5:cb:f3:3a:29:ad:8b:5d:76:a7:31:
0c:69:9f:16:5d:a4:4e:71:46:1d:d8:55:03:9f:5e:35:be:8b:
c1:c0:ae:12:48:41:59:e9:d0:9e:e4:63:c0:ca:fe:d6:f5:99:
4d:93:ae:62:55:d5:89:41:08:2a:4d:a0:8a:c2:6d:d0:9d:bb:
cd:e9:e4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:40:59 2026 by rpki-client