Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oUx52o8IwpnEYya3m55CTkmmh1s.cer
File: oUx52o8IwpnEYya3m55CTkmmh1s.cer (raw, json)
Hash identifier: IW1cS/eTDYsNLIMoN4AOP3+M1ddI9EegJH9NzIndtS4=
Subject key identifier: A1:4C:79:DA:8F:08:C2:99:C4:63:26:B7:9B:9E:42:4E:49:A6:87:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5DE192119E9284A8FEDE10E150C1E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/22eb53-4f60-411b-8409-d4c97ff6e11e/1/oUx52o8IwpnEYya3m55CTkmmh1s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/22eb53-4f60-411b-8409-d4c97ff6e11e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.239.73.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:de:19:21:19:e9:28:4a:8f:ed:e1:0e:15:0c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a14c79da8f08c299c46326b79b9e424e49a6875b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:82:1f:52:6f:3a:ea:23:a8:75:53:90:e1:
c4:17:86:c7:10:1c:d1:6e:b0:3e:9a:1d:a0:36:55:
a0:b8:48:46:3c:5e:28:5e:1f:1d:ed:9c:08:85:4a:
b7:b7:ea:61:26:89:92:22:aa:1d:fe:25:8a:a1:be:
9c:07:c2:8a:4d:6f:3e:ad:52:13:e0:50:4a:d1:92:
42:cb:d3:ab:26:b2:52:55:e5:aa:5f:9e:9a:a7:4e:
34:ad:08:87:ea:c0:4f:40:8d:db:6a:da:ec:82:79:
76:34:0f:31:51:8c:4a:fe:b9:4b:9d:a2:f3:5b:b3:
63:04:b3:bf:b0:bf:37:e6:f9:cf:67:ee:28:b4:97:
fd:b4:7e:ec:09:2d:35:6e:4d:ed:ad:1f:d2:28:13:
9b:5c:46:38:84:a2:b6:2b:df:4d:ac:fd:bb:ff:30:
31:c0:3b:55:2c:2a:49:1e:f4:cc:49:4c:ba:2f:8c:
ca:2f:13:ce:17:76:86:a9:00:5c:94:20:6a:20:4b:
4a:b2:1a:98:0b:d4:fc:63:65:f4:db:a0:a1:2f:52:
5e:2d:c8:49:59:0b:45:4d:e0:7e:7d:1e:c5:18:cf:
9d:b4:4c:ea:bc:38:55:44:24:60:21:20:1e:70:c4:
73:5f:25:52:e8:87:65:7a:6d:8e:b4:8f:96:f6:4c:
58:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:4C:79:DA:8F:08:C2:99:C4:63:26:B7:9B:9E:42:4E:49:A6:87:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/22eb53-4f60-411b-8409-d4c97ff6e11e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/22eb53-4f60-411b-8409-d4c97ff6e11e/1/oUx52o8IwpnEYya3m55CTkmmh1s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.73.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b1:4f:7a:fb:b4:81:d3:84:60:13:03:fe:9f:d1:0a:70:f7:
91:a8:09:ed:12:4c:ba:18:54:95:d8:73:18:2a:fe:13:0c:5c:
ef:73:0a:4a:58:62:f2:80:74:9a:ac:6f:34:e1:c1:87:47:4b:
a6:ec:0b:66:ba:f2:e1:19:41:c5:1a:79:89:67:2b:2b:1a:b0:
f7:02:a3:2a:e8:db:e4:04:f9:64:8f:f2:ee:e9:89:64:f9:a0:
7c:28:f0:f3:4d:18:50:f3:ad:e3:d0:25:15:a0:32:87:80:3f:
17:94:1a:1d:df:6e:1c:c4:e3:92:e3:0e:e4:4b:b1:46:f8:e9:
1d:e8:c1:ce:b1:e4:27:58:2b:a6:0d:04:ab:67:ff:27:39:e3:
40:16:0a:73:e0:68:56:65:ae:36:9f:b2:1c:d2:9a:58:0c:e9:
f7:bc:e4:c2:5f:66:0e:a4:8c:b7:3e:ca:00:19:07:56:fe:48:
6d:b6:42:47:1c:d1:a3:70:c4:5c:f1:bd:2b:5d:f5:e0:e9:fb:
77:ba:80:39:99:71:94:d1:1c:0a:55:0b:ad:6b:30:f5:fe:05:
2a:c9:68:dd:8d:c3:63:03:78:81:95:89:9a:3c:ef:1f:af:f1:
cd:74:b3:2e:8f:bc:7c:53:9d:7e:c2:a2:cd:b7:08:d4:da:31:
73:b1:d7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:16 2025 by rpki-client