Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
File: oktI7cejJdfxrg8lfA4oNRcbya4.cer (raw, json)
Hash identifier: mtU8gDPbsxKVuuFGiEkYiuA0lUL7AjWob3NEjMutDM8=
Subject key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC27BDD333A04AE723551A44413D17
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39704
IP: 5.22.248.0/21
IP: 46.182.216.0/21
IP: 91.192.36.0/22
IP: 94.124.88.0/21
IP: 185.1.190.0/24
IP: 185.94.168.0/22
IP: 185.103.16.0/22
IP: 194.50.163.0/24
IP: 195.216.246.0/24
IP: 213.132.192.0/19
IP: 2001:7f8:104::/48
IP: 2a00:1bd0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:27:bd:d3:33:a0:4a:e7:23:55:1a:44:41:3d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dc:68:e9:f4:01:3f:d0:fd:91:48:ea:44:cf:
26:c5:bd:95:5b:ba:e5:82:e0:14:39:9f:5c:e2:f1:
a6:ba:42:c0:bd:4e:9d:c4:af:b4:b7:9a:ae:e4:4f:
03:59:b8:64:83:b6:79:43:09:fc:1c:85:4b:3a:9b:
4a:61:d0:ce:14:ad:52:6d:1e:6d:a2:6e:65:79:38:
0f:5d:db:98:d7:1a:19:1f:3a:23:29:72:a5:25:36:
75:60:42:ff:6d:71:ce:26:fe:eb:6f:c5:45:49:91:
48:b8:76:e9:cb:df:c7:f1:25:df:68:fa:3f:17:61:
74:1a:a9:b9:d1:19:46:93:90:97:c2:db:63:c2:5f:
8c:b0:1d:19:0c:bb:b9:37:7b:89:c4:ae:4f:3f:30:
d5:13:40:bc:25:e9:a8:26:89:17:e0:e5:d1:7a:b7:
b8:55:e3:a2:6b:b3:e6:bc:ef:cf:c9:eb:83:f1:2f:
2b:fe:65:8c:cc:a0:2c:48:ce:18:13:e9:52:af:8a:
ad:29:6c:73:18:90:45:29:41:e7:67:f6:74:1f:fb:
27:f1:cf:ab:7f:3f:06:71:4a:a5:31:97:a9:b6:05:
29:67:98:8b:2b:5b:e4:0e:96:54:f7:f7:8e:fb:7a:
4c:7b:68:87:fc:0e:ed:cf:46:86:57:b9:8e:da:c0:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.248.0/21
46.182.216.0/21
91.192.36.0/22
94.124.88.0/21
185.1.190.0/24
185.94.168.0/22
185.103.16.0/22
194.50.163.0/24
195.216.246.0/24
213.132.192.0/19
IPv6:
2001:7f8:104::/48
2a00:1bd0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39704
Signature Algorithm: sha256WithRSAEncryption
16:f9:c7:b3:4f:af:ca:8b:54:db:97:cb:f1:96:3d:fa:87:ae:
22:77:bc:ef:b8:fc:e6:ec:4c:5a:3a:d4:84:87:35:3d:84:ff:
f5:1e:16:e8:3d:60:b1:57:cf:d8:85:b8:07:a0:15:48:8f:57:
50:e7:aa:50:ba:6b:04:d7:7f:c3:61:b1:26:a5:73:ae:6f:3c:
6e:28:bb:7f:06:58:dc:c1:80:ac:6f:fd:73:3f:d5:de:7a:2e:
5e:a8:44:b9:ac:3a:d0:be:ff:38:c6:86:ed:de:ae:b2:9b:eb:
6b:29:22:b9:23:c6:3e:74:d3:32:2d:26:31:35:28:92:a8:d8:
b8:7a:ec:fb:61:f8:1e:1c:82:c5:24:17:ba:64:bf:cc:09:9d:
11:11:f0:82:83:1f:6d:c3:36:3f:6f:b7:4a:d6:a4:c8:04:b0:
09:c2:eb:12:b7:5d:b3:74:13:d7:7d:be:73:59:86:3d:67:39:
1a:ce:c0:de:3d:85:72:5e:82:c3:f6:86:d7:04:ca:d2:29:83:
8b:c4:b4:7f:78:b2:2e:09:cb:e4:52:8c:9d:c6:87:8e:e1:0a:
0c:15:96:63:ce:6b:df:7f:a2:ba:20:4e:80:7c:fd:d4:cc:e0:
e2:2c:1a:43:c0:83:29:63:b6:18:50:19:c0:fb:cc:5b:c3:01:
2d:3d:b8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:35:44 2025 by rpki-client