Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d2oMnacMWgfglaFFHNorzoR9vg.cer
File: 0d2oMnacMWgfglaFFHNorzoR9vg.cer (raw, json)
Hash identifier: mespd1woNFodzZgRFi7DcA2WatmXoHEOtIp+Cm9dipI=
Subject key identifier: D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA8DC5091BBB5F48EE937897810556
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57300
IP: 91.109.168.0/21
IP: 95.87.120.0/21
IP: 185.73.164.0/22
IP: 2a05:3ec0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:8d:c5:09:1b:bb:5f:48:ee:93:78:97:81:05:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1dda832769c31681f825685147368af3a11f6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ba:a2:7f:6e:f0:c9:5a:a2:26:48:7c:78:45:
8f:77:89:90:d3:b5:8f:b2:85:e3:02:d4:12:89:c7:
39:b7:ad:43:d0:ec:a8:aa:5d:1a:4c:70:f5:4b:26:
9d:08:1c:4a:55:72:b3:73:af:fd:29:c2:0b:2c:89:
7d:bf:de:06:20:5c:be:b9:42:2b:ac:36:7d:0b:76:
36:ba:7b:61:92:79:94:77:29:a1:cb:8f:f9:28:ef:
ae:78:0d:4a:f0:f7:27:0c:1b:36:a7:79:90:19:fe:
1d:9b:a2:63:30:a5:fe:b0:01:a3:90:83:01:1b:7d:
55:b3:c9:c4:f4:30:8b:cf:76:2d:f1:4b:5e:44:28:
a6:0e:8a:96:60:5f:79:37:59:10:dc:fd:8b:70:dc:
18:47:d2:c6:1e:37:ac:7b:f0:5f:3e:56:5d:8f:bb:
da:24:02:ea:34:f2:c6:55:5a:b1:e1:00:2e:d9:80:
a7:aa:07:f1:52:1e:70:74:17:d5:24:f4:98:af:4d:
ea:94:77:78:e8:e1:8a:e9:e3:79:c6:d4:5d:5b:b1:
95:57:86:c6:45:c9:1d:71:65:41:ac:e4:dc:b8:f7:
7b:95:76:50:e6:48:a7:c4:65:22:46:2b:5b:c4:cc:
5c:a1:d8:d5:50:d5:29:ed:e4:99:bd:5b:08:7a:8d:
77:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:DD:A8:32:76:9C:31:68:1F:82:56:85:14:73:68:AF:3A:11:F6:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5a6d3c-17da-44d3-a402-86236bac1308/1/0d2oMnacMWgfglaFFHNorzoR9vg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.109.168.0/21
95.87.120.0/21
185.73.164.0/22
IPv6:
2a05:3ec0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57300
Signature Algorithm: sha256WithRSAEncryption
a0:af:05:38:0c:92:71:66:ba:76:e2:94:b0:e8:a6:3a:c6:69:
f7:70:dd:09:1a:ef:7d:55:12:81:fb:22:18:aa:5f:d0:ec:1a:
91:ea:59:e4:0b:a0:c4:ab:4f:2e:46:6c:c3:d9:97:80:f5:9d:
bb:8c:07:5f:cd:f4:79:9d:05:38:85:35:57:ac:5c:64:31:94:
12:4b:58:f6:5f:09:c2:3d:84:af:30:3a:cc:3a:75:62:ba:6e:
87:49:76:d3:47:7a:df:27:95:f2:cd:37:0f:6b:95:8a:91:f8:
5d:8a:3c:1b:ea:5c:09:ee:ea:17:bf:a2:96:ea:9e:d1:1e:cc:
2c:b8:64:f1:c8:ba:6e:93:c4:4a:4f:95:75:43:d1:44:da:03:
2d:fd:3f:8d:d9:49:74:f1:47:96:75:63:dc:b4:da:67:03:d2:
24:f3:65:08:8d:51:b4:a0:be:5b:f9:32:ad:e2:57:6f:3b:cb:
7c:cc:8a:9a:5d:48:4b:62:94:ef:d7:b7:43:bc:76:d4:1e:69:
54:4a:c7:38:43:51:a7:fd:4d:d0:2e:1b:b3:2e:73:d0:5a:ac:
42:fd:4d:44:43:22:03:5d:8c:dd:9a:7e:14:96:c3:8b:4c:76:
24:71:77:12:84:e5:fa:49:ec:9e:d9:88:7a:27:2b:6a:2c:bf:
03:b2:8b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:28:54 2025 by rpki-client