Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.cer
File: OEDxTHgwNEVl2ZKq7U8Gzls6P-w.cer (raw, json)
Hash identifier: DNLNqS7LuvtE5VMR3S5KqDrj6QPG2sPMRdWAVuywFBE=
Subject key identifier: 38:40:F1:4C:78:30:34:45:65:D9:92:AA:ED:4F:06:CE:5B:3A:3F:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019633C42435DB51E79F203306D5155B9C8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 14 Apr 2025 10:06:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.212.184.0/24
IP: 2001:67c:874::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:33:c4:24:35:db:51:e7:9f:20:33:06:d5:15:5b:9c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 14 10:06:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3840f14c7830344565d992aaed4f06ce5b3a3fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8c:30:d3:56:f9:de:0d:d3:8c:10:8e:b1:8e:
b8:f2:26:a3:12:6d:ac:a2:48:68:11:60:a9:7f:b2:
c4:16:ee:f0:4a:13:ba:c3:41:e2:5f:a6:91:3b:19:
0d:0f:f0:14:e1:7f:be:72:6d:fb:7f:db:19:f5:21:
3e:49:f6:dd:63:6e:00:30:3f:ba:c8:dd:86:4d:94:
7d:8d:3c:8f:5f:1c:8b:d4:ec:f8:29:94:ef:2b:f0:
ec:6e:c3:6b:26:85:4e:23:aa:0d:02:75:e7:67:50:
28:3f:36:de:61:18:fd:26:16:2f:be:fa:a0:78:76:
87:9f:dc:e7:0d:e3:8e:e8:18:21:08:46:e7:14:75:
7d:01:14:70:47:d5:e2:0e:10:71:dd:fb:0e:3b:24:
a0:43:15:82:a2:bf:37:c9:52:79:f3:c6:15:1d:da:
dd:b3:60:73:6d:80:0e:80:ed:45:50:76:79:34:4b:
53:fb:b4:4f:73:fa:6c:c0:da:68:e3:e5:66:0b:89:
0e:a0:f9:f6:fc:80:4c:0b:1b:e5:c6:86:3a:d9:49:
3c:0b:2e:f1:7f:15:40:cf:67:16:8c:73:43:dd:1e:
3a:3b:fe:96:d6:47:d6:c7:27:6c:ff:e7:4c:b3:69:
15:51:43:bc:65:6a:64:f2:2e:e7:11:eb:9f:fc:e5:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:40:F1:4C:78:30:34:45:65:D9:92:AA:ED:4F:06:CE:5B:3A:3F:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/00ce31-2925-4722-ba45-c853d10b1bcd/1/OEDxTHgwNEVl2ZKq7U8Gzls6P-w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.184.0/24
IPv6:
2001:67c:874::/48
Signature Algorithm: sha256WithRSAEncryption
a3:32:1e:18:67:3e:c5:b8:27:10:c4:ef:20:e7:06:d9:ca:92:
8f:09:69:39:6b:8f:53:91:d6:92:b4:30:57:ed:b3:4a:b8:1f:
08:fa:8f:d8:a9:b7:e6:df:cc:fb:19:37:b6:60:a9:11:d3:41:
5b:be:96:ff:0c:d2:5c:4d:d7:9b:d3:31:4f:26:c0:99:fc:88:
71:b2:26:62:9a:c0:5f:2c:b0:21:32:a7:fc:4c:ce:1c:48:e3:
18:65:da:0a:21:48:95:c9:90:0b:a3:53:d5:9a:a1:28:2e:0b:
40:d2:51:e7:bd:bb:c5:54:76:7d:c7:a5:13:e3:72:de:4e:e7:
bc:27:13:51:6e:3d:ac:23:32:05:04:43:dc:38:b3:ce:59:be:
f5:ec:86:a8:00:96:f1:3c:96:e4:a3:36:5d:7d:e0:dd:2e:59:
38:ff:89:ed:ee:f4:9a:f0:59:1b:df:49:ed:17:4f:3c:b3:10:
d4:b6:45:dc:37:11:7c:3b:6e:36:0f:a1:a5:ba:4c:b0:2d:26:
17:bf:83:93:3a:62:3d:9c:a5:33:bd:bc:64:11:dc:ef:5e:08:
83:da:09:82:c4:77:05:5d:37:20:3b:23:d9:dc:f8:eb:09:b3:
f6:fd:8b:58:1a:99:d7:e9:98:2d:49:6e:35:9a:1b:a9:b6:51:
34:c5:43:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:07:11 2025 by rpki-client