Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
File: oxkPbv156nMz-bzNhaBDUtkVsjk.cer (raw, json)
Hash identifier: IptCy3SRhlruAQd2A696IHrtBq01u6VE5lfAUAxT9R8=
Subject key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD5673A9F8295911FF993BEBD9688A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50343
AS: 207139
IP: 109.233.152.0/21
IP: 185.169.112.0/22
IP: 2a01:8780::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:56:73:a9:f8:29:59:11:ff:99:3b:eb:d9:68:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1a:1b:21:2c:f7:82:d6:c0:28:9b:c1:b3:55:
27:1c:15:4d:48:c8:0c:55:c2:85:ac:65:9f:5f:ce:
78:9b:3e:7e:8b:45:ec:36:4a:48:27:07:c0:01:fb:
33:14:ec:70:b7:cc:f6:8b:9b:7a:b0:e9:35:ee:40:
22:28:a0:e8:36:d2:3a:50:8c:a1:f1:9f:dd:1b:76:
96:66:51:d5:36:38:6f:59:78:6e:84:0d:08:de:00:
d4:02:79:9d:86:a8:5c:07:bd:6c:f3:4f:af:35:f4:
c4:f0:95:f4:ca:df:7b:01:62:3b:93:e0:bb:87:97:
0d:7e:20:4d:86:d1:f5:bb:bc:fd:1b:9b:e3:f5:b3:
ff:06:fd:61:a7:ed:a6:e8:87:90:8f:2f:33:3b:98:
6f:42:0c:7f:7e:8d:ac:56:66:44:70:3f:fb:75:9f:
08:6b:ff:bb:24:50:6d:4c:c2:16:83:49:f1:ff:83:
62:c8:50:c6:9d:2c:3d:00:6e:b0:93:a8:67:1a:8c:
92:3b:72:3a:5c:67:72:2f:59:67:92:91:be:e5:9d:
f6:c2:ec:85:7b:28:9b:5e:99:b4:fc:51:4d:c5:a6:
96:fb:c4:61:be:4f:38:a5:04:34:47:b1:58:a8:15:
8a:38:71:66:11:47:da:58:46:8f:7c:84:6d:4d:f8:
f4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.233.152.0/21
185.169.112.0/22
IPv6:
2a01:8780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50343
207139
Signature Algorithm: sha256WithRSAEncryption
7a:f1:70:fe:e2:6e:79:48:00:5d:ee:a2:d3:e9:18:49:1d:a3:
b1:c6:31:fd:3f:6e:6b:29:b9:6f:6c:22:0e:70:b8:60:4a:6e:
7b:e2:98:85:c9:88:84:26:55:bd:99:db:f8:43:d5:97:6a:0d:
fd:00:50:8a:b9:3c:1a:ab:13:14:d3:b2:7c:d3:3c:c8:f7:b6:
46:cf:07:8c:90:11:6d:03:69:58:38:9a:2c:9f:df:bc:09:47:
39:68:c8:77:6a:58:a5:dc:95:51:e7:db:bf:e0:c3:01:73:dd:
1c:ee:76:ca:69:8f:6b:94:fe:41:ff:19:b7:d3:01:a8:2e:bb:
16:34:b1:3c:d1:42:fc:cd:9f:d7:c9:72:c7:f9:c8:6f:f4:c3:
d3:94:ae:90:2e:9d:ad:83:c2:d8:25:7a:00:c3:a9:94:67:79:
ae:14:2c:af:51:02:ff:c2:e4:c0:82:2f:03:02:59:76:2d:0b:
e4:64:6c:d7:22:57:c8:13:89:b4:f2:aa:13:4b:f9:89:60:10:
fb:e8:8b:2f:a2:3e:b7:f0:9f:d5:d6:e3:25:bb:34:98:86:10:
1a:92:9b:dd:9b:fc:96:3c:6c:97:2a:99:00:45:4e:f4:68:1d:
f9:76:56:8c:3d:d0:d0:39:7d:90:a2:8f:aa:61:a5:4c:1e:b7:
e5:6e:f3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:08:20 2025 by rpki-client