Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B9oznlzTwb4CzmgCoEIYVqoLVHs.cer
File: B9oznlzTwb4CzmgCoEIYVqoLVHs.cer (raw, json)
Hash identifier: H8T+c3/p8KkrmR3FBmten8sY2epSMZ25VtX4I4nblBw=
Subject key identifier: 07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F91911E7F1CDB6618E7030E050428
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 37.1.160.0/21
IP: 37.252.104.0/21
IP: 185.19.36.0/22
IP: 2a00:4320::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:91:91:1e:7f:1c:db:66:18:e7:03:0e:05:04:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07da339e5cd3c1be02ce6802a0421856aa0b547b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b0:e8:0c:ca:ac:b5:70:0a:66:b6:fa:28:1c:
5f:6b:39:98:c6:f4:17:d1:fd:c3:4c:a4:8f:e4:a0:
2f:d2:e9:e6:9d:15:e7:31:bf:28:29:5a:28:d3:4f:
83:53:1c:70:c2:5c:1d:7a:1b:4b:53:2b:ea:36:b7:
33:93:31:86:77:c9:93:94:ad:cb:f1:ae:a1:4e:e0:
ec:f8:bc:35:16:9b:df:7a:26:00:0c:53:84:3c:13:
e5:ea:c7:66:84:49:84:21:a7:ee:dd:28:79:f2:ef:
b8:0b:d6:d5:11:e0:0b:f8:42:11:6a:82:9f:22:ab:
64:1e:23:fa:7f:cb:20:fd:39:89:dd:38:f0:c3:4f:
f6:64:af:bc:7e:53:93:16:69:b7:da:35:3d:bf:59:
d9:f0:c8:2f:a7:10:4f:ce:6a:44:c2:96:d1:c2:6d:
00:79:6c:41:44:36:76:c6:01:0a:2f:d5:da:a6:52:
1c:39:67:95:73:7a:27:b2:53:69:4a:1e:27:cb:c9:
f7:af:14:fa:82:a6:9f:80:42:1b:6c:55:c0:43:f9:
09:6c:ce:40:94:60:55:19:df:27:e3:44:b2:2e:6d:
65:16:fe:d1:26:ec:67:89:62:56:1e:88:32:01:55:
3e:e8:62:dc:02:04:c0:38:76:2f:3a:6b:d0:31:ff:
a4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DA:33:9E:5C:D3:C1:BE:02:CE:68:02:A0:42:18:56:AA:0B:54:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c62e0c-4454-43c8-97bc-81674d953d56/1/B9oznlzTwb4CzmgCoEIYVqoLVHs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.1.160.0/21
37.252.104.0/21
185.19.36.0/22
IPv6:
2a00:4320::/32
Signature Algorithm: sha256WithRSAEncryption
67:50:18:cc:9a:6a:9d:e3:bd:c8:b0:f9:7b:86:b2:03:34:61:
72:f2:48:6a:82:e9:f1:ae:75:be:76:0d:28:63:45:eb:28:45:
da:54:6b:b6:e4:8a:22:82:5e:ac:dd:bd:ce:8a:07:00:38:08:
ec:a1:42:d7:e9:12:b8:9b:44:71:81:d4:e2:fb:5a:75:9f:5c:
da:24:3f:87:4f:46:03:dd:f5:6d:9a:75:0f:bd:8f:25:82:09:
b6:a5:93:9e:70:e1:46:79:6d:c0:27:37:18:de:3d:27:43:e2:
6b:27:64:39:1a:23:37:cf:c7:15:1a:bc:5a:9f:70:48:f1:85:
fd:42:a0:e1:f0:b3:95:e2:ba:dd:9b:88:51:6e:c1:ee:34:4b:
eb:e1:29:11:dc:1c:e3:bd:fb:ef:99:02:60:6a:dd:1a:d6:30:
32:dd:46:85:99:a3:fc:19:0f:b2:ad:ee:48:57:93:5b:83:61:
54:11:e5:86:b0:f9:49:ea:82:74:05:ef:81:bc:27:c8:e0:43:
d5:59:ab:9e:fe:1d:32:0a:34:66:a2:b8:a0:bf:8e:43:dc:f1:
45:03:b1:5c:05:82:73:77:98:9b:07:f3:b4:a3:55:94:ab:e4:
bf:4e:9d:e7:57:9f:9b:dd:45:d4:ca:b0:aa:ed:53:90:51:23:
d7:79:5c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:48:00 2025 by rpki-client