Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer
File: oewv8gIW07xkdbhQpGXjYvTs7s0.cer (raw, json)
Hash identifier: Z3erBhMeRzUR7LrUoU4yKbK+9Qql4/2oEQ3IOWMVQMc=
Subject key identifier: A1:EC:2F:F2:02:16:D3:BC:64:75:B8:50:A4:65:E3:62:F4:EC:EE:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FE48ABDEAC7FB8A66F2B99B918652
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.46.1.0/24
IP: 193.46.44.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e4:8a:bd:ea:c7:fb:8a:66:f2:b9:9b:91:86:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a1ec2ff20216d3bc6475b850a465e362f4eceecd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:ef:f5:34:f1:25:49:56:2e:6d:54:80:bf:
f8:54:e7:9f:0c:e6:bb:08:49:d0:fd:d1:78:a6:48:
69:19:0a:f0:27:68:6e:8a:0e:96:cc:16:b2:05:6f:
31:07:63:a5:d6:91:fc:67:f5:6d:e1:f3:e1:2d:c4:
8a:4a:cf:d5:e6:6c:c9:52:6a:df:27:4f:df:8d:b2:
64:ec:c8:70:f4:f7:6a:55:7e:3e:32:6a:01:5d:80:
f7:d6:07:bc:ee:6f:10:f6:4a:2a:34:3b:6c:07:dd:
1c:49:84:b5:ac:c6:1a:5f:77:64:ab:cc:ac:6c:70:
40:67:02:71:ac:8a:20:53:79:e0:23:06:6f:d1:cb:
69:53:50:f0:43:e0:d9:0a:92:59:b5:c5:71:0b:54:
2c:53:76:eb:f4:52:ae:2a:42:ff:75:84:8c:d1:9c:
8e:04:21:ab:51:94:16:49:d2:3f:90:0c:35:9e:a6:
50:a0:65:eb:35:17:80:c0:ce:5e:51:c9:23:eb:3a:
35:10:ae:06:d2:c4:92:d5:23:24:9e:ed:d5:ee:f3:
a8:1a:8d:c5:61:4b:d1:5e:24:62:bd:ae:ba:21:a9:
63:9b:cc:61:96:28:af:36:b1:1a:d4:ec:d9:53:a4:
29:05:77:f1:47:8d:8f:29:2b:81:fd:57:85:38:f1:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EC:2F:F2:02:16:D3:BC:64:75:B8:50:A4:65:E3:62:F4:EC:EE:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.1.0/24
193.46.44.0/24
Signature Algorithm: sha256WithRSAEncryption
08:8a:20:3c:3d:49:fb:85:c6:1d:74:3b:bb:4f:b6:bf:14:b9:
aa:bb:d4:2b:5c:d1:18:ce:cb:1b:b6:9b:d9:64:fd:fd:98:ec:
09:36:be:55:21:c2:9f:9d:92:ef:08:c2:01:c4:3d:1d:96:b8:
16:60:ea:31:08:93:2e:0c:5f:c4:73:1f:ac:1f:1c:f0:24:f5:
fc:e2:cb:4a:8f:a3:7f:b0:7b:5f:b4:d1:66:a8:d2:9a:3f:07:
33:22:2c:84:1d:67:3e:1c:ac:eb:ce:d1:f6:7f:4c:4d:24:38:
b7:ac:78:25:cd:53:b6:1a:7f:9d:20:f6:d1:04:cf:6e:20:6d:
5b:f0:7d:84:f7:9e:93:07:53:70:39:b7:e1:29:ab:cc:ee:3b:
11:34:36:2d:95:95:ee:e2:43:91:c6:f9:88:e8:ed:f8:23:3c:
d2:5c:26:e0:23:a2:0e:54:d7:6d:70:a7:56:c6:cf:4c:13:88:
21:09:a6:46:a8:b5:b5:9a:71:27:6d:ab:00:6b:02:f1:b3:d5:
ce:16:f3:1c:7b:d7:50:21:5d:59:37:83:21:b5:7d:a1:92:5c:
83:9e:78:64:8c:88:56:bc:b7:a7:05:16:b1:07:1a:11:1a:f4:
b9:7d:76:48:a9:5d:61:dd:84:c0:f0:0a:e0:58:8b:51:fd:85:
84:ff:be:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:53:01 2025 by rpki-client