Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0OZTSNwTyFSZx3dNFWYUwSARirU.cer
File: 0OZTSNwTyFSZx3dNFWYUwSARirU.cer (raw, json)
Hash identifier: MKqTBzWCiH4pmBrPSrXWwIni3Lk4f5JxX78URr55mUk=
Subject key identifier: D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C3CCD62F97A654CF40D458EE7C95A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:678:4b0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3c:cd:62:f9:7a:65:4c:f4:0d:45:8e:e7:c9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0e65348dc13c85499c7774d156614c120118ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:ee:f9:2f:d3:fa:10:ee:0f:02:3a:a9:14:
67:31:c0:a2:88:02:99:cb:00:26:79:42:28:66:52:
cc:d0:9f:06:51:3f:5d:94:be:ad:4c:bb:8d:ad:4f:
62:12:0d:51:97:49:90:da:77:09:4e:6f:ec:6a:14:
e5:b4:99:ad:e4:6b:47:eb:29:b5:f9:c7:af:0c:b2:
ce:c9:3c:d0:91:f2:4a:31:34:3b:7c:aa:3b:5c:33:
3a:31:b8:df:b1:6d:c5:7f:12:a5:ca:f7:29:41:3d:
8b:27:35:c4:43:43:bd:d7:d2:a7:4c:be:17:bf:99:
d6:d7:a2:a0:bb:ed:90:d8:bb:15:b9:e3:c3:c8:d9:
61:e4:2f:82:6e:aa:8d:92:84:da:fe:c1:b5:a9:32:
de:81:5c:c5:dc:c1:28:92:99:eb:73:fb:f4:30:46:
07:4a:90:e5:5b:19:4a:da:a4:79:c1:6b:d3:0d:36:
1d:58:90:ec:64:39:0c:7b:b3:2a:13:f0:95:4c:f9:
15:a0:91:90:b7:1a:1f:a1:2c:3b:85:26:c2:d9:94:
aa:80:85:4c:28:93:83:07:71:54:90:99:b7:26:d3:
12:01:b0:c5:18:14:e2:01:11:1a:f2:3c:f2:be:3a:
ca:6f:1c:a4:c7:fc:de:71:a8:19:59:c3:25:00:85:
90:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E6:53:48:DC:13:C8:54:99:C7:77:4D:15:66:14:C1:20:11:8A:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d7a4a7-07e2-48ad-ba56-0db0ec1e945c/1/0OZTSNwTyFSZx3dNFWYUwSARirU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:4b0::/48
Signature Algorithm: sha256WithRSAEncryption
8f:25:41:0b:f3:77:bd:da:e7:95:1f:a4:99:03:83:d4:34:bd:
5a:5c:6e:aa:3d:9e:1b:e5:87:a3:48:14:ed:9e:c4:cf:23:c4:
46:4d:18:49:1b:e2:de:7a:48:34:8c:2d:91:6e:3d:64:ba:90:
f2:2e:f4:60:c8:d0:2f:9c:83:7d:1e:84:17:24:81:2e:7a:8a:
2d:63:9b:f2:19:78:fa:29:23:49:6e:1d:b6:6c:18:4d:79:ec:
7f:10:ff:a9:86:85:3e:49:f1:e2:7e:5b:a3:d9:38:6f:05:68:
d3:09:ff:d3:b8:05:6d:b0:42:73:7d:7f:61:58:e3:4e:26:32:
df:dc:23:fc:fc:0c:3f:e8:30:8b:00:ae:e6:19:2a:04:04:f4:
45:f8:de:67:8e:da:55:2c:21:f1:63:a7:ea:e6:52:30:8e:9c:
7a:0d:2f:4c:70:4d:84:95:9f:90:3b:df:f9:20:a9:32:da:20:
38:1a:97:88:89:f8:18:67:e8:f5:d2:e7:4b:c9:01:c0:7a:0a:
e3:40:51:13:13:5f:5f:c0:2c:16:7a:20:c0:d6:55:c7:e3:62:
bf:b3:c7:17:e6:db:09:6c:32:7b:e6:92:97:59:81:15:30:af:
9c:ca:2c:1e:b9:e5:68:66:46:0f:61:17:0f:7b:fd:f4:2a:09:
b7:a9:b4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:00:00 2025 by rpki-client