Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OffHSY_ZyfKGgElRYrnrdq1HxgM.cer
File: OffHSY_ZyfKGgElRYrnrdq1HxgM.cer (raw, json)
Hash identifier: ReHpMSG1yoK1JkKsUqOoAWM5WvZhSLfRa4oMR6mlpO8=
Subject key identifier: 39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D6618DA20E6DC3213F6F8B112A0676
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.250.108.0/22
IP: 2a0c:c40::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:61:8d:a2:0e:6d:c3:21:3f:6f:8b:11:2a:06:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39f7c7498fd9c9f28680495162b9eb76ad47c603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:78:8e:e1:8b:c3:68:cd:83:21:53:45:2f:
28:7a:27:cb:f8:e7:08:c9:53:98:2f:08:d7:fb:39:
f2:8d:33:3e:0e:08:de:a9:06:26:3e:c3:7e:e2:0b:
cb:1b:9a:aa:c2:09:1a:da:6d:f1:ad:1e:20:12:10:
b8:9f:d8:d9:0b:cf:50:48:d1:c9:3c:8d:a0:bc:60:
42:04:cd:51:55:0c:ea:53:12:c3:93:73:f6:6f:4b:
07:ec:65:27:ce:9f:2b:18:82:2f:81:7c:a9:fa:7f:
12:f1:b8:76:65:3b:37:cc:17:75:a7:f2:b3:70:cb:
07:56:7c:e5:17:d7:54:82:1d:b8:60:d9:11:8e:47:
8f:bb:34:dd:fb:6d:26:f6:57:46:da:f8:b4:a7:62:
2e:5e:70:4c:d8:f2:0c:8e:4d:68:51:f9:b0:1a:c2:
58:b2:f5:b1:c9:64:a9:dd:28:2e:f5:11:43:cf:d9:
08:a5:9b:c7:87:22:ae:80:2a:5a:d7:06:6c:c3:67:
f6:9c:af:bb:db:71:30:53:33:b5:ca:87:e6:b3:21:
ab:bc:93:a9:b0:7d:79:94:76:16:98:51:af:af:fb:
83:90:52:6a:1c:ca:be:4a:36:e6:f6:8e:bd:2e:de:
e0:27:ae:67:b2:7a:f3:f5:86:90:dc:47:6d:9b:28:
87:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F7:C7:49:8F:D9:C9:F2:86:80:49:51:62:B9:EB:76:AD:47:C6:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/1d5b0b-4b05-402c-8265-efcfba9907dc/1/OffHSY_ZyfKGgElRYrnrdq1HxgM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.108.0/22
IPv6:
2a0c:c40::/32
Signature Algorithm: sha256WithRSAEncryption
8b:7b:57:28:5c:23:a6:07:c8:a8:ad:2d:b1:35:60:d9:9a:3a:
8e:28:88:73:0a:c5:7e:16:8f:d4:87:6f:52:83:3c:b2:63:60:
61:ae:e8:65:6c:80:a1:84:11:aa:ac:df:a8:04:5c:e5:80:d6:
d1:5d:55:76:81:52:ca:36:91:7a:20:57:1d:d0:b2:62:e3:76:
32:ab:d2:53:36:de:94:99:05:4e:84:82:e6:0f:ae:91:fc:88:
72:23:8b:25:cd:6b:de:5a:b4:ad:3f:2f:01:0a:d3:a8:5e:e8:
f9:46:7f:8c:ea:02:df:31:fe:91:6e:b5:36:cc:ba:47:51:46:
05:d3:87:22:5a:36:c5:e9:ac:9f:9a:35:17:56:fe:9d:8b:89:
87:2b:9d:30:b2:e8:6d:08:2a:2b:2a:38:e5:7e:30:af:85:0b:
11:c2:93:f2:f8:f9:8c:f9:da:20:6c:a1:31:5d:04:16:c6:c5:
76:99:44:e8:9f:c4:5c:7f:c0:bf:cf:51:58:6b:94:d6:71:63:
48:f4:2b:73:7e:f4:6c:f8:a8:2c:9b:da:eb:35:78:de:9d:42:
e3:8d:8e:03:d1:14:e7:6b:4d:89:87:97:33:23:53:96:6e:50:
3b:f9:54:ab:34:05:22:2d:c2:b1:9b:5c:e2:d2:3a:e9:bd:dd:
1d:ad:17:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:51:35 2025 by rpki-client