Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
File: OpNtLymObP1WYEVz0e-eDoKZtSk.cer (raw, json)
Hash identifier: k3Y2LK93UTPTAi22V3jqJ4z0hrOESMIOf0328BKPGG8=
Subject key identifier: 3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC5F0E774D62F34731E71A2DC5DDCF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 164.131.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:5f:0e:77:4d:62:f3:47:31:e7:1a:2d:c5:dd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:36:c8:95:c5:c8:cb:41:51:cf:42:3d:26:c9:
44:fe:6a:2f:a4:c1:a4:bc:b2:6e:1a:7e:ad:6a:ab:
26:66:9b:38:78:11:26:49:b3:c0:49:f1:12:b3:7e:
f4:fc:3a:23:69:d2:7b:a6:42:83:33:a3:65:c7:24:
0d:e0:ac:ec:4f:7d:e4:48:7b:e6:d9:08:c4:fe:33:
9b:a9:30:c3:80:7e:ae:84:8e:3b:b0:59:cb:37:49:
52:a0:fb:cd:72:5a:e8:40:3e:80:88:bc:b4:2a:79:
79:45:bd:50:4d:35:2f:5c:e0:1d:d4:ef:4c:ac:a4:
43:7d:c6:32:9d:c2:63:32:ee:e4:5b:9b:6e:31:0c:
d7:e1:c3:2d:c9:c6:83:2a:eb:76:61:4f:86:f0:8a:
66:45:3f:83:71:66:1f:3b:fa:68:2f:b6:c0:da:b0:
d3:87:5d:cc:e6:80:ac:55:bd:e9:5f:51:dc:19:a0:
18:0f:22:27:6b:82:46:13:5b:c9:12:16:67:54:9f:
a3:05:aa:7e:9f:5f:dd:0b:d8:3a:08:06:6e:34:5c:
ce:40:83:b8:3b:e0:dd:6a:26:ec:b4:3d:7b:fb:c3:
7c:d5:6e:7c:2f:b8:56:a0:07:e7:16:fe:4c:74:74:
fa:6e:83:f4:51:1c:80:9d:ff:94:15:aa:f1:f5:b0:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.131.0.0/16
Signature Algorithm: sha256WithRSAEncryption
af:82:6b:18:74:93:8b:2b:e8:b3:20:96:51:d8:6a:c0:fa:67:
77:d4:77:43:d5:b8:e2:f0:6c:e3:ac:c2:45:e3:fa:21:c4:a7:
c1:c8:b2:d9:32:6e:13:fc:f8:0f:1a:b4:25:40:3d:52:ee:34:
41:3d:24:6c:76:01:fe:61:2b:95:60:bd:f0:cb:8b:98:cd:84:
05:c9:44:15:7d:71:58:54:7f:87:57:c1:8a:3e:c5:e4:45:fa:
2c:f5:6a:14:66:fc:ca:7c:b0:b1:6a:85:9c:95:68:c3:07:38:
95:52:2d:52:40:9b:a8:18:88:97:a1:b6:c5:27:13:95:a2:62:
af:b8:b8:c4:db:d9:b4:93:dc:f7:02:bf:cf:3a:3c:66:75:45:
0a:4c:b4:a7:b1:15:a0:5c:06:87:d8:1b:ff:19:d5:d9:53:3f:
01:07:00:49:f1:c8:2d:64:59:84:b9:48:2f:b2:dd:14:e7:17:
04:6b:98:1e:2a:28:68:51:6e:7c:41:26:64:0e:04:99:20:2f:
5d:ef:cf:dd:1b:dd:73:40:9b:be:7f:1d:b3:00:8a:ff:57:24:
bd:48:75:f9:b1:43:d3:7d:92:23:e3:6d:96:b7:eb:7d:14:ff:
86:a2:72:3b:10:ff:00:3b:31:af:07:27:fd:64:a7:5c:e4:79:
2c:8a:b4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:15:11 2025 by rpki-client