Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer
File: OEiIXJcC6sHz0BJj5tPlREnuIVQ.cer (raw, json)
Hash identifier: e9U4Ib5hxm1GwTjO+NcD43nv8PdCcu1cVjt5vaxY+lk=
Subject key identifier: 38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D6339F50E6CF6A4F98705F828387C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210767
IP: 188.64.139.0/24
IP: 2a11:fc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:33:9f:50:e6:cf:6a:4f:98:70:5f:82:83:87:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3848885c9702eac1f3d01263e6d3e54449ee2154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:8b:65:db:9a:8f:35:e3:86:85:93:b9:c3:
88:22:7c:09:ff:b6:d9:4f:cf:11:0b:79:03:41:56:
00:67:80:b4:b5:d3:19:03:1e:43:48:1a:87:c9:1b:
bb:1d:d7:00:de:33:49:34:c8:e1:8f:a8:21:ef:84:
26:63:21:4f:d5:fd:a3:b3:91:24:2f:17:25:f5:23:
15:30:ae:f1:5b:5d:1b:1a:89:b2:b3:46:8c:5c:0d:
2f:be:bb:65:57:73:78:9a:ea:76:c9:d4:44:21:26:
17:70:9f:05:37:04:14:3b:98:7f:10:f5:41:40:4f:
7c:fc:15:e6:de:d7:d1:e2:8b:13:bf:73:ef:b9:a6:
f7:fc:5d:ff:6d:95:aa:a6:74:ca:15:c7:6c:49:2c:
43:39:19:c4:e6:af:d2:14:07:70:d9:59:22:7d:66:
8e:e8:4b:35:05:f2:e2:a8:51:3a:99:d6:eb:ca:6d:
35:e3:85:54:5b:97:6d:20:af:63:dd:a2:7e:e6:e8:
55:c8:fd:74:5e:40:fb:a9:35:94:29:91:6f:6f:ea:
b2:ff:d2:ff:c5:6b:ea:70:01:fb:17:99:d0:d2:e4:
aa:44:11:0b:fe:eb:d7:e9:4d:6d:c3:37:1b:de:6c:
46:f7:39:e6:b5:90:51:09:96:c1:a7:cb:64:52:6b:
16:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:48:88:5C:97:02:EA:C1:F3:D0:12:63:E6:D3:E5:44:49:EE:21:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/37bdb7-9b93-46ab-9a15-42a48dbc2521/1/OEiIXJcC6sHz0BJj5tPlREnuIVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.64.139.0/24
IPv6:
2a11:fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210767
Signature Algorithm: sha256WithRSAEncryption
93:87:a8:3c:68:9a:aa:30:99:56:c9:64:8d:58:e0:f8:ad:92:
75:83:da:84:53:91:2c:99:2b:1e:b3:ef:9e:1d:37:f3:ec:30:
12:1d:4c:69:da:43:bb:3c:72:a0:42:4c:9c:36:6a:5d:25:be:
67:d5:98:30:23:c3:88:88:c6:5f:60:59:6f:52:09:3c:df:ec:
3b:aa:06:fd:f4:c6:1b:3b:ba:b7:c1:2c:4f:f7:24:00:29:bd:
b1:6c:94:c2:98:59:eb:85:75:f4:90:27:a4:f2:9b:34:4d:93:
5d:59:e9:17:30:88:05:76:e6:6b:c6:fb:97:52:8e:7a:2a:8c:
d0:80:fa:2b:a8:c4:82:fc:01:1c:af:6c:dd:47:5d:8e:a0:75:
9e:0e:b0:bc:d4:d0:8c:2e:62:cf:53:95:82:0b:8e:ca:b9:f1:
40:d3:ce:48:b5:1b:f4:6f:2f:54:6f:aa:ec:08:7c:32:c9:ba:
2a:4a:df:1a:19:cf:71:b5:f4:ca:5b:51:cb:84:e1:44:e7:ef:
8e:d4:5a:6d:fa:19:a5:d5:84:55:4e:da:97:b9:1c:da:33:d9:
c7:c5:4f:e2:a8:c3:ba:1a:60:9f:95:32:e3:48:4b:bf:d9:d1:
a3:ce:f6:95:84:8d:10:e8:08:36:9f:ff:32:5b:9c:89:c9:6a:
de:ee:55:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:10:32 2025 by rpki-client