Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
File: oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer (raw, json)
Hash identifier: /selHyJ2bXB4PiDOASwf43NUxomgrRR3kN/5pA3Kp7s=
Subject key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDA4652C82E492A0677BE382A43D33
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 93.91.48.0/20
IP: 2a01:7ec0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a4:65:2c:82:e4:92:a0:67:7b:e3:82:a4:3d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fe:a1:c3:ae:8f:fb:2a:8d:62:c5:0c:72:5d:
83:c8:c4:cf:1e:f7:55:3c:1b:8d:3b:c8:e9:13:ca:
72:9c:f5:54:fe:b1:2a:0a:e4:c5:2e:3e:2e:e2:ec:
ec:ce:c5:29:a7:a3:80:7e:3f:27:40:ab:6d:55:b7:
ba:f7:8b:37:ae:08:08:d0:f7:a6:a7:ba:ce:d6:74:
08:9b:69:f1:cc:b4:de:73:90:07:d3:ee:97:8d:e5:
47:1d:78:33:ee:c8:59:2b:55:2e:26:37:25:81:f0:
b0:5d:cf:4f:92:3f:2c:27:00:e6:13:33:70:74:ba:
3f:35:33:9c:68:4c:cf:15:38:99:ca:a5:86:e7:57:
2a:18:26:e5:67:cf:ae:a4:bc:b6:90:8e:6e:c3:8c:
cf:bd:ed:b8:62:5f:b7:81:6b:7e:66:bc:68:57:bc:
61:90:64:d1:15:fc:73:f3:53:4c:eb:f7:9c:ca:b5:
27:d6:02:70:6c:bb:f7:f2:5b:24:c5:25:f9:ec:b3:
a4:b9:6a:ff:ba:e5:3e:a0:90:6b:ce:25:33:56:81:
20:60:ba:49:a6:d7:6c:f7:58:b0:2b:c9:ac:dd:fa:
5f:24:32:72:2d:a1:02:8a:36:ff:f8:cc:a4:50:f8:
37:e9:a5:6a:17:df:92:71:e9:6b:ef:f5:96:87:68:
97:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.48.0/20
IPv6:
2a01:7ec0::/32
Signature Algorithm: sha256WithRSAEncryption
4e:e8:1a:25:01:6b:e0:12:c3:a9:05:6f:3c:22:3d:ef:9b:dd:
b9:be:c8:bd:9e:b8:10:56:ee:7c:f7:63:ae:65:e9:03:e1:06:
90:57:36:c2:b2:3e:08:05:a1:b9:62:73:e1:bc:3e:04:28:f2:
55:3b:3c:d2:e5:92:b5:e6:ef:64:5b:2f:54:58:f7:f6:ef:37:
b2:12:8a:72:47:71:a4:14:ef:fd:0b:61:4c:77:ef:b2:8c:e7:
98:ef:f4:8d:53:c3:f5:a6:d3:a3:0a:16:40:5e:ba:41:eb:b9:
54:3e:2d:d6:66:33:66:77:a3:50:11:24:f8:30:87:67:58:ae:
5b:da:0f:fb:d8:8b:36:cb:7c:ee:22:1e:d7:2a:56:12:1a:2b:
6a:ed:1c:75:e5:21:95:95:e4:95:ba:c7:c2:1e:7d:11:c5:0a:
c7:5c:25:1f:61:e5:cf:c6:5b:34:2b:35:93:78:bb:de:0c:a4:
28:40:e1:26:98:08:e0:ed:38:71:19:bf:e9:1c:cc:87:6c:56:
7f:a1:f7:96:ed:e4:8a:cc:9f:33:db:6b:d4:77:b8:5a:c6:ed:
61:9d:2c:c2:2b:55:f0:9a:88:58:87:62:5c:ff:c6:c4:eb:5d:
1e:14:d8:5a:99:5c:c7:df:2d:e7:12:15:50:4a:f3:45:a6:66:
fc:12:30:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:11:46 2025 by rpki-client