Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Oexx3D1ozej5B3069mdRwp_O6kw.cer
File: Oexx3D1ozej5B3069mdRwp_O6kw.cer (raw, json)
Hash identifier: enTFgDt8nh8cQp0DxNjyuwBlJ5yN/INOoFiy1ZJvKAY=
Subject key identifier: 39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747A1D7C5E3F9CA4C0F895F3CD66FF5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 178.213.152.0/21
IP: 2001:67c:134c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a1:d7:c5:e3:f9:ca:4c:0f:89:5f:3c:d6:6f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39ec71dc3d68cde8f9077d3af66751c29fceea4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:28:47:11:fc:16:64:15:f5:ba:a3:67:9c:7e:
a6:b2:27:d1:c2:e7:1b:32:bf:ce:4a:b9:c7:75:ec:
a4:51:da:77:9d:a4:61:63:ad:76:78:6f:2e:ec:52:
fb:db:6e:17:f2:4a:80:1d:9d:79:1a:f1:04:1f:af:
c0:2d:19:34:cf:6e:70:b2:74:a2:28:14:f0:0c:91:
5f:9d:d4:c5:79:f1:5d:55:36:30:d7:fb:e5:df:f9:
22:36:68:47:31:14:fd:03:7a:c2:9b:1c:35:02:45:
0b:7c:da:26:e4:14:5f:4e:a4:f2:c5:80:e1:72:19:
fd:a1:c9:49:4f:4b:ac:7a:04:06:7d:66:44:40:aa:
82:3a:a4:f4:42:75:4d:62:39:22:e0:e8:f0:e3:d0:
c4:e4:92:01:5f:e3:0e:75:a7:f3:53:ec:3d:6d:c7:
47:3a:2c:d5:5a:2c:a7:40:ca:0e:98:a0:c0:21:3d:
c0:8d:29:52:ed:8d:1c:c5:88:12:4d:e8:0f:58:7b:
68:59:fe:51:fb:2f:97:6f:64:c7:16:e8:15:d5:52:
c5:dc:a7:91:46:1c:dd:17:62:68:08:eb:e3:d5:8e:
97:1f:55:6f:16:4e:ec:0f:a0:ae:04:3a:76:29:74:
6b:c2:03:1c:22:18:15:e8:f5:a9:27:4c:21:d1:39:
d8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EC:71:DC:3D:68:CD:E8:F9:07:7D:3A:F6:67:51:C2:9F:CE:EA:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/1bfdf7-a19f-418e-89c7-db3f22705dd6/1/Oexx3D1ozej5B3069mdRwp_O6kw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.213.152.0/21
IPv6:
2001:67c:134c::/48
Signature Algorithm: sha256WithRSAEncryption
70:82:48:18:3f:4d:d2:bf:c7:71:b9:c2:75:f2:07:b1:7a:83:
9e:b2:40:d2:cd:a2:a6:0a:d7:89:40:43:47:29:d5:a5:a2:37:
82:96:a1:33:af:24:f8:01:bd:b6:a1:e1:25:83:7c:70:10:6b:
25:20:1b:4c:df:b6:ea:0b:e9:f7:93:6f:97:83:3c:f3:19:ee:
80:06:f6:7e:c4:b2:d0:30:4d:78:91:0e:aa:cb:04:82:b9:39:
5d:59:18:5d:bd:f2:87:5c:91:f5:ca:8a:db:92:fc:06:e2:2b:
d6:db:34:df:0f:d3:de:df:e7:8c:83:e2:d0:4e:1a:7f:fd:74:
30:97:86:5a:59:bd:4f:50:1e:9f:9b:1a:41:a5:9c:16:2d:d0:
64:71:ea:f5:ef:66:3a:be:bd:8d:59:82:8a:be:83:c0:31:25:
d8:4e:9b:d7:fb:28:ab:5c:b8:1f:1e:32:f4:82:07:9a:a0:66:
4e:bc:db:fb:c9:d2:2f:26:61:5b:10:97:9b:79:a0:fc:3a:e7:
3b:1b:e6:43:ba:09:17:db:63:d7:73:4b:da:60:5d:d2:49:a5:
87:f1:43:00:ac:ba:5c:35:ce:fb:1d:08:88:81:ff:3a:45:72:
2d:9d:3c:3a:d6:3d:fd:dd:91:d8:ca:d9:ab:51:b7:34:ea:5e:
ef:6c:12:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:39:18 2025 by rpki-client