Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
File: 6_OFztCQ2_HQRHNOEqJw7muEHJY.cer (raw, json)
Hash identifier: 8LJpdPkGxwBOnFr/CYLNrwVvnWBvZKwtLBgY3whu0u8=
Subject key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA2F47115F2FAAE9A7870380CC94CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.141.88.0/22
IP: 2a0e:cb40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2f:47:11:5f:2f:aa:e9:a7:87:03:80:cc:94:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebf385ced090dbf1d044734e12a270ee6b841c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:97:88:4c:76:a0:6d:34:61:92:16:82:e0:
1c:c5:84:55:ee:f0:32:08:8b:fb:e2:21:06:42:e3:
b8:66:e2:95:6c:53:f1:fe:21:e9:d8:66:df:f9:bb:
b8:8f:5e:bf:f3:6a:7a:83:74:68:0d:04:36:a0:af:
1a:e7:2d:62:fc:f3:e1:8a:13:3a:03:98:37:69:38:
e0:5a:5d:87:83:79:d5:1b:c3:58:de:9a:11:1e:e2:
11:67:bf:66:3b:3f:43:0d:0c:a8:7c:ed:3c:a2:a2:
7d:89:36:cb:54:c5:80:9e:39:34:6d:ff:73:83:c3:
34:6a:bd:0c:a0:f5:bc:99:06:e4:5b:97:c4:03:db:
ed:fe:e1:80:ab:e4:48:1b:ef:aa:76:59:94:b6:21:
ea:f8:76:bb:7b:06:b3:e2:c2:9a:62:97:24:62:75:
a4:d5:36:48:79:04:c6:c7:8d:30:48:cc:7b:c8:66:
ff:2d:84:3b:52:41:cb:dd:cb:4b:cf:12:6d:c0:12:
a0:db:98:0c:c5:0b:82:b3:93:f4:d4:36:42:8c:30:
3d:9b:9b:3e:4f:cf:f7:34:be:d9:65:7b:93:91:64:
9b:3f:70:3a:03:51:ca:6e:f3:8e:79:c8:4d:ce:9e:
90:87:54:89:05:ec:4d:9c:77:4b:a8:95:f1:2b:df:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.88.0/22
IPv6:
2a0e:cb40::/29
Signature Algorithm: sha256WithRSAEncryption
3a:90:7e:c5:f3:ec:ea:e5:22:81:4b:f3:61:b7:75:c4:7b:83:
ee:82:fc:e9:d7:c5:f0:7b:67:a6:50:16:c6:4d:33:f5:eb:1e:
d5:98:f9:2f:43:6c:32:25:b0:e8:09:ef:15:ca:ff:cb:88:6e:
1c:a4:b1:d8:34:1f:80:3c:32:63:4e:20:17:44:74:d4:94:1d:
06:1c:37:3e:46:c0:5d:bf:73:4d:79:3a:e7:12:8f:e3:a5:c7:
15:fb:d3:b0:82:e3:95:99:09:3a:84:89:30:4e:40:29:8a:cc:
b3:92:38:f5:fe:7e:51:bd:82:09:08:c4:8a:b7:d9:9c:83:8a:
5d:99:2f:27:d7:1f:c2:25:08:16:0d:ac:a4:81:c7:26:1e:f3:
a0:d0:86:d8:8c:3c:95:c0:6b:52:69:b3:00:a0:ee:8b:81:72:
ce:d7:85:d1:0e:a5:dc:e8:c8:65:15:df:70:83:2c:58:07:2f:
03:97:cf:db:2c:72:73:e1:33:cd:df:db:20:aa:a1:37:55:2d:
b0:47:f7:75:64:d0:9d:47:78:1c:3b:9c:6b:53:7f:5d:e6:bc:
d4:b0:15:2d:67:ff:b2:43:06:12:52:fc:9a:0e:fe:94:4b:e0:
10:7a:55:a6:9f:dd:9e:c0:dc:d4:38:fd:f1:3e:30:9e:10:fe:
74:1b:01:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:22:33 2025 by rpki-client