Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
File: dOEz6h5A_BPgdOMncQpTRKlgtcA.cer (raw, json)
Hash identifier: x0XBgY8IP3FVnaKLy6tJ9VWVosFgIUN8XssAeBnH7lc=
Subject key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDC42A1FF57AA30A9BAD60CB3F267E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 31.169.68.0/24
IP: 194.1.208.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c4:2a:1f:f5:7a:a3:0a:9b:ad:60:cb:3f:26:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:05:12:b2:bb:f8:77:01:ce:b0:ce:aa:05:4a:
38:50:98:41:82:f2:c5:bc:01:57:82:81:cf:d4:0f:
c4:7f:b5:8f:6d:b7:2d:31:e6:ff:3b:b3:41:02:bc:
71:5e:a1:ae:07:98:25:f4:b1:f7:25:d8:74:d9:39:
5f:d9:a2:1b:eb:f2:dd:22:8b:77:b2:e0:e2:f9:50:
c3:8b:0d:b1:75:0f:8e:33:3e:98:fd:21:67:8c:2f:
05:5d:18:6e:8f:a6:ed:93:ed:49:82:61:be:fb:f9:
34:06:51:7e:e6:e6:9b:11:06:59:01:fb:ff:34:08:
79:4d:72:e1:45:c6:2e:ad:23:bd:45:55:89:48:40:
fa:be:f4:57:63:e1:31:3b:ac:4e:25:83:1b:7f:25:
f2:7e:6a:4e:56:32:4f:9e:81:90:f6:c1:63:d4:0c:
6d:19:10:b4:75:ec:d4:e4:3f:b0:8a:34:b9:87:31:
e8:6d:65:50:b1:eb:73:7c:7b:39:5d:c6:3a:0b:fc:
64:ba:b0:0b:ab:30:9b:92:07:b5:0c:06:58:cc:51:
38:8f:a5:67:71:d3:85:ed:42:0f:63:7b:48:79:10:
05:1a:70:a2:79:8e:1f:ce:ed:28:1d:b3:72:cc:56:
f6:a0:5c:58:11:ba:23:00:9f:61:5a:6c:9e:ef:dd:
54:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.169.68.0/24
194.1.208.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:41:2a:7b:54:4d:f9:23:4f:fb:ad:3b:03:8d:c5:9e:2a:0a:
ef:a9:ad:50:3a:33:42:72:e0:b1:67:dd:b6:55:78:fd:b9:b2:
7f:4b:86:21:5b:15:d5:9b:9e:a8:42:37:de:1d:25:4d:78:68:
82:48:ee:78:18:7b:3e:b4:22:d8:74:74:b0:ed:b5:c2:9e:69:
b8:8b:1d:43:be:d6:26:30:10:14:c1:4d:43:d9:a3:cb:4f:89:
0d:c7:08:ea:3d:5d:ad:55:5f:12:a2:ed:f5:b8:e5:d2:3a:15:
c2:51:1c:03:d0:b6:4a:72:e6:c5:a6:a1:b8:55:58:04:4e:a9:
76:31:9c:f7:db:06:be:1c:e7:95:27:e8:a7:5d:de:3c:3a:9d:
44:8d:fd:e1:85:ed:70:b2:4b:ef:c5:61:04:0f:a7:05:8f:85:
84:57:bd:b8:6c:96:57:22:49:32:67:7f:02:4f:1b:7b:f7:ec:
b1:c3:be:fa:4d:79:4c:98:49:99:af:f6:48:56:3c:e6:29:0f:
e3:3d:96:13:75:1e:23:ee:08:a1:0a:82:32:b3:bc:92:76:fa:
2a:5f:87:14:4a:61:6d:0a:b5:ea:22:63:0f:5c:b4:f3:9c:2e:
ef:f2:2d:d5:05:bd:c6:02:57:2e:6c:53:de:de:51:c6:2e:27:
90:76:e5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:47:50 2025 by rpki-client