Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
File: Dkbx623dT_7-GDgAMCvmNs_pZTc.cer (raw, json)
Hash identifier: ofZ5NMIRYGNPS8KHhfg2ktS9wfDQp0WMXD6Nlzf8DCI=
Subject key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266AD49C291D951A8F1B2E2A7B5CE350
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59522
IP: 176.123.57.0/24
IP: 2001:67c:3f4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:d4:9c:29:1d:95:1a:8f:1b:2e:2a:7b:5c:e3:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:ba:5c:b5:c4:58:5c:6e:88:39:ad:68:7e:
e6:cf:09:ef:f3:8a:00:0d:0d:67:a2:92:4a:9b:9f:
47:41:c9:74:33:f1:12:3f:c5:15:38:32:02:23:7f:
b6:07:cf:76:c1:4f:63:ea:64:7f:39:77:0b:f7:09:
7d:83:bb:4e:d7:79:ab:66:22:5e:02:63:df:b9:99:
1c:f7:4e:a1:a9:e4:56:31:a9:41:f4:da:bb:00:d3:
1d:dc:45:8c:51:4a:9a:cc:73:63:67:5c:fa:ec:e4:
f4:41:d2:40:c6:e2:b4:a4:46:e9:8d:e6:3c:a4:3a:
75:d9:fa:ed:eb:db:b5:a2:41:7a:e7:84:6e:2b:aa:
72:1d:4c:60:af:00:7f:7e:86:db:a6:8c:fb:b4:a4:
df:a5:b9:e0:82:cc:81:a3:e6:1f:94:45:fd:c8:1f:
d0:73:42:bf:02:9c:5d:12:0e:e3:21:6e:8b:48:eb:
36:44:82:42:f4:38:72:80:c7:c6:e0:0d:86:a6:0a:
7d:a4:33:97:54:c4:fe:1b:db:2c:39:12:e7:33:50:
ca:7a:61:a4:63:b9:9c:6d:2b:98:23:73:54:c4:8d:
74:85:51:2a:08:24:0c:3c:cf:14:87:34:f9:e6:f1:
1e:ef:ff:15:6a:50:fd:ad:e8:a2:27:af:8f:66:e0:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.57.0/24
IPv6:
2001:67c:3f4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59522
Signature Algorithm: sha256WithRSAEncryption
90:2f:df:4b:b1:31:5c:8a:8e:1e:9d:d3:04:68:fa:a2:e1:b7:
e7:17:5f:99:ae:2d:e0:c5:55:96:d8:c4:d9:e5:bb:5b:99:01:
d8:24:17:d1:3c:70:79:8d:14:d0:7c:04:9e:a5:0d:a2:ad:4a:
32:05:11:05:92:61:7c:72:61:f9:8f:74:a0:0c:7b:36:7f:e2:
4a:b7:38:a3:15:bd:49:37:b7:34:2e:50:21:4f:52:10:2c:a0:
bb:61:97:08:cd:03:2a:5b:99:0f:e3:d6:d0:4c:08:c8:a2:0c:
a9:c2:31:c1:cc:12:49:ab:51:61:bc:b3:41:74:a4:e7:b3:c8:
f7:c8:21:30:f5:9d:5c:9e:0f:a8:46:80:59:9e:61:ba:40:86:
71:87:71:e9:67:f5:bf:ce:ff:6d:ff:f5:a5:a4:3c:ea:e9:70:
7d:3c:53:13:e8:9f:2f:4b:06:c5:07:c5:fb:f8:52:9e:74:06:
2e:60:a4:a9:3c:24:0b:d8:0f:a8:15:dc:ff:6b:bb:54:7b:c3:
ab:d1:92:e7:df:ad:43:85:2b:5b:03:33:33:d9:62:57:32:24:
1c:ad:99:44:0b:fa:df:4b:5d:47:01:05:02:8f:d3:f8:b5:a4:
2d:45:8d:f5:56:29:df:8a:1e:de:00:66:85:51:a7:e7:5e:54:
23:aa:bd:56
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgISAZQmatScKR2VGo8bLip7XONQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0ODQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTQ2ZjFlYjZkZGQ0ZmZlZmUxODM4MDAzMDJiZTYzNmNmZTk2NTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBK6XLXEWFxuiDmtaH7mzwnv84oA
DQ1nopJKm59HQcl0M/ESP8UVODICI3+2B892wU9j6mR/OXcL9wl9g7tO13mrZiJe
AmPfuZkc906hqeRWMalB9Nq7ANMd3EWMUUqazHNjZ1z67OT0QdJAxuK0pEbpjeY8
pDp12frt69u1okF654RuK6pyHUxgrwB/fobbpoz7tKTfpbnggsyBo+YflEX9yB/Q
c0K/ApxdEg7jIW6LSOs2RIJC9DhygMfG4A2Gpgp9pDOXVMT+G9ssORLnM1DKemGk
Y7mcbSuYI3NUxI10hVEqCCQMPM8UhzT55vEe7/8ValD9reiiJ6+PZuClrQIDAQAB
o4ICsTCCAq0wHQYDVR0OBBYEFA5G8ett3U/+/hg4ADAr5jbP6WU3MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzU1OGFm
ZS00OWZlLTQzOGUtYmQzNy1mNGZjZWQzNWIzNTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvNTU4YWZl
LTQ5ZmUtNDM4ZS1iZDM3LWY0ZmNlZDM1YjM1Mi8xL0RrYng2MjNkVF83LUdEZ0FN
Q3ZtTnNfcFpUYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAsHs5MA8EAgACMAkDBwAgAQZ8A/QwGgYIKwYB
BQUHAQgBAf8ECzAJoAcwBQIDAOiCMA0GCSqGSIb3DQEBCwUAA4IBAQCQL99LsTFc
io4endMEaPqi4bfnF1+Zri3gxVWW2MTZ5btbmQHYJBfRPHB5jRTQfASepQ2irUoy
BREFkmF8cmH5j3SgDHs2f+JKtzijFb1JN7c0LlAhT1IQLKC7YZcIzQMqW5kP49bQ
TAjIogypwjHBzBJJq1FhvLNBdKTns8j3yCEw9Z1cng+oRoBZnmG6QIZxh3HpZ/W/
zv9t//WlpDzq6XB9PFMT6J8vSwbFB8X7+FKedAYuYKSpPCQL2A+oFdz/a7tUe8Or
0ZLn361DhStbAzMz2WJXMiQcrZlEC/rfS11HAQUCj9P4taQtRY31Vinfih7eAGaF
UafnXlQjqr1W
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:11:26 2025 by rpki-client