Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5vOOPoarVh-g3TywmnDWGyykR0A.cer
File: 5vOOPoarVh-g3TywmnDWGyykR0A.cer (raw, json)
Hash identifier: B82HBRXTfmfFXF7aRmokQE1BBO3Q838MHLF3OyX2i+s=
Subject key identifier: E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B611BF5BEC4BBA4BD5F62FD2CC3DC4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 88.135.75.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:11:bf:5b:ec:4b:ba:4b:d5:f6:2f:d2:cc:3d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6f38e3e86ab561fa0dd3cb09a70d61b2ca44740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:5a:aa:96:d7:66:20:08:49:01:2c:6b:f8:
1c:c9:32:9e:de:7f:90:9f:ea:a3:a7:79:77:f8:a5:
67:6b:6d:b0:58:12:33:6d:e7:c1:de:4d:92:33:1e:
43:40:ae:45:37:f0:ec:29:ec:90:02:49:1b:67:c5:
57:cb:e7:bd:15:be:3f:3c:86:0f:f7:99:d8:98:b0:
7b:2c:cc:41:44:8e:9c:3b:a2:1f:2d:4f:4a:e8:79:
6b:7a:2a:61:46:9d:e1:b3:59:41:f5:bc:4a:91:42:
03:f6:e9:66:54:ff:48:3f:09:49:ee:5a:6d:2f:28:
32:95:1e:ad:c1:04:ad:fc:c3:39:7d:4f:2c:3e:8a:
70:8a:df:60:fd:68:78:b0:a3:50:0b:bd:a9:f1:a8:
5a:6f:40:0e:6a:10:f9:b5:5b:da:38:cd:4d:28:ed:
28:b9:3a:99:08:a1:c9:c9:b5:c4:e4:cb:99:53:5e:
ee:1b:65:d2:21:d8:3f:32:2e:65:00:67:1e:3b:be:
8f:16:a9:1a:03:cc:0c:a3:9c:c6:88:81:c0:5f:a7:
d5:48:c5:60:1c:51:af:13:c2:5c:51:4c:2c:cd:2d:
14:43:78:ec:e3:6a:24:03:ce:c7:c8:5d:59:f6:36:
db:a1:b3:1c:87:46:c9:7f:46:51:10:62:3e:a8:1c:
6d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F3:8E:3E:86:AB:56:1F:A0:DD:3C:B0:9A:70:D6:1B:2C:A4:47:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/5vOOPoarVh-g3TywmnDWGyykR0A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.75.0/24
Signature Algorithm: sha256WithRSAEncryption
83:0a:ed:eb:25:cf:1c:81:72:0e:16:67:a7:e4:88:b1:87:fb:
0b:33:76:da:82:4f:34:17:9c:74:69:4e:fa:1b:df:f8:cb:68:
bf:94:38:c5:e3:2e:9b:b0:3f:0d:02:d4:9b:25:9b:77:0e:31:
50:21:8f:78:cb:4b:0c:c7:1c:c9:13:23:52:c4:2e:59:92:4d:
8d:06:76:ba:69:d6:9f:e5:4b:12:34:68:e6:ad:b0:20:9f:06:
fa:96:0c:86:46:8c:85:c5:df:8d:0b:70:2a:c5:ab:75:e6:30:
32:a7:73:3f:62:33:09:d9:45:64:2a:fe:b2:79:c6:bc:09:3b:
6a:73:a6:5e:30:4a:e7:0e:b4:6c:0d:5e:1d:d5:c8:9b:08:01:
a2:71:12:0b:56:76:2d:17:7d:5e:78:e8:89:40:6d:ef:3b:04:
e1:01:0a:7d:78:da:26:55:5e:1e:ca:07:b6:c0:42:78:fc:23:
cc:d7:b8:8c:16:f6:27:89:bb:d5:fd:f3:33:5c:d3:83:73:33:
c4:4b:29:bb:d8:88:b7:7f:78:11:be:8e:6b:18:1f:35:4e:69:
a7:04:db:bc:aa:d3:0f:91:c4:3c:ef:c5:c2:cc:9e:5c:59:55:
8b:1f:50:c2:b4:bd:a4:0d:c3:ac:1e:75:14:90:a6:90:34:db:
bb:07:12:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:15 2025 by rpki-client