Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z81z-CwmDahzhtz3vibVxURVJvo.cer
File: z81z-CwmDahzhtz3vibVxURVJvo.cer (raw, json)
Hash identifier: es5IeU8Ul4f15QP0PQj81URDabqJENIslKd3aHRQ9Zc=
Subject key identifier: CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196B530119ED60B9C17A6A9A8B000D684F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 09 May 2025 13:15:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35246
AS: 49181
IP: 2.57.36.0/22
IP: 45.144.40.0/22
IP: 85.158.184.0/21
IP: 2a09:d2c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:30:11:9e:d6:0b:9c:17:a6:a9:a8:b0:00:d6:84:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 9 13:15:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfcd73f82c260da87386dcf7be26d5c5445526fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d2:89:89:6a:21:30:e1:69:69:fc:fc:7b:ef:
cd:f3:3f:cb:38:46:ed:76:b7:73:60:f5:e9:aa:c3:
4c:5a:82:7e:33:ad:aa:02:ae:4f:bc:3f:5e:b1:ef:
94:41:93:e7:2d:df:a8:32:d7:de:d0:ae:5c:eb:59:
25:62:97:4b:c7:71:cd:c9:b9:70:1b:0a:36:4f:0c:
62:1d:de:94:a7:d6:77:63:e0:08:ad:f8:d2:20:5b:
c7:2d:7f:a1:a7:92:24:35:24:fe:8f:c2:0e:89:2c:
c6:d0:1e:07:a1:ef:3d:16:c8:54:92:2a:08:98:ce:
cd:05:98:1a:d3:1d:8e:f5:68:49:22:b1:f4:6e:91:
6d:5e:82:ff:6c:ab:ee:29:3a:7a:89:b7:cb:0d:2b:
19:19:5b:36:9f:51:b1:8a:5e:79:47:2c:7b:0a:11:
82:da:cf:4a:25:11:e7:13:dd:be:a1:ff:19:83:cb:
9a:4c:2f:a0:82:eb:b7:d1:e3:35:ae:e5:c3:f8:15:
c8:3c:ee:e1:90:dd:48:b3:09:dc:d4:28:28:0f:ae:
a7:ee:f8:fe:64:f2:ea:d3:e0:bf:64:74:fc:9c:df:
57:bf:21:35:15:8c:df:fb:e2:a0:b0:e7:5d:c3:be:
af:27:10:ab:55:e1:4d:f1:08:52:86:57:8e:04:5d:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:CD:73:F8:2C:26:0D:A8:73:86:DC:F7:BE:26:D5:C5:44:55:26:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/40ade0-98da-4aa5-b817-6edc1b225625/1/z81z-CwmDahzhtz3vibVxURVJvo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.36.0/22
45.144.40.0/22
85.158.184.0/21
IPv6:
2a09:d2c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35246
49181
Signature Algorithm: sha256WithRSAEncryption
25:09:7c:2d:58:1a:62:f6:da:a3:41:f5:24:5d:65:42:dd:90:
a2:01:6d:e6:ed:0d:29:78:43:a6:b0:f3:e7:b1:da:26:95:42:
82:4a:51:4f:fe:3c:85:20:76:84:7a:77:8b:0c:4d:2d:67:61:
50:5d:61:fc:0e:aa:c7:6e:5b:fb:d1:fe:e6:1c:ba:44:92:3a:
54:43:cf:c2:d4:f4:3f:ff:55:38:33:2f:ae:aa:95:22:16:92:
d4:be:e1:be:33:ab:24:21:d3:8e:74:14:c5:b9:27:13:d3:31:
8f:6b:09:1f:c8:d3:62:6a:bd:d3:53:21:ba:23:5b:a9:27:ba:
45:d6:19:fd:99:66:fe:0a:42:7d:a8:b3:72:d1:81:4f:8b:dd:
06:e5:e9:a9:ca:8e:9c:f6:ab:a3:e8:de:04:12:6d:f8:11:64:
b2:12:cc:a0:14:a3:6f:32:e0:24:9a:69:8d:d2:9e:56:dc:63:
5f:7e:a9:dc:8a:48:3b:c1:ab:50:75:41:8d:7d:5a:b6:36:81:
30:a4:29:8f:95:9e:b3:bb:22:30:52:b9:53:68:6e:20:69:01:
1c:3a:6a:29:77:49:5c:cd:a7:c6:53:42:a2:90:d9:22:17:52:
28:c1:1c:7e:9d:5a:e0:0c:63:20:51:f7:0b:21:ae:e3:b8:e0:
fc:c3:43:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:10:14 2025 by rpki-client