Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x-oItp98MM16CBOuuRCffnXSqjg.cer
File: x-oItp98MM16CBOuuRCffnXSqjg.cer (raw, json)
Hash identifier: j+qOz9sk2YQCXNOIQmA05R4DngsVMa/DxAXdC3nuD1M=
Subject key identifier: C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019758E3644FA1BA933C8525F31F1896B960
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Jun 2025 08:09:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.66.104.0/22
IP: 45.132.100.0/22
IP: 2a14:4d80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:e3:64:4f:a1:ba:93:3c:85:25:f3:1f:18:96:b9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 10 08:09:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7ea08b69f7c30cd7a0813aeb9109f7e75d2aa38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:f2:3a:93:f6:5f:7d:7a:3a:b6:50:39:2e:
bc:c1:e7:b4:86:ed:6b:5b:97:f7:a3:bd:8f:02:ff:
95:3c:1f:72:ab:95:a7:e5:d2:eb:0b:50:80:a3:8b:
9a:59:c9:85:9e:27:84:71:06:07:9b:cd:0a:c0:09:
fa:cf:f3:78:3f:9e:4f:e8:d3:81:78:f6:20:2d:18:
73:11:2b:91:e9:55:99:06:ea:c8:83:97:b0:be:0f:
38:d0:3f:87:44:a0:f0:f7:33:37:7e:a6:d6:32:36:
97:9e:e7:12:0f:3c:8f:06:75:dd:07:7e:3f:64:f9:
74:b9:99:b5:7b:4b:4f:ce:3f:d5:23:cd:44:fb:7a:
c6:44:a6:c5:9a:be:0a:34:16:59:b0:6e:1b:ad:47:
33:29:4d:24:86:9b:4d:36:6d:be:a5:09:b6:a4:b6:
70:a5:bb:12:a9:7d:ec:fb:cd:45:45:df:20:c4:b1:
c6:8c:74:9b:f6:35:de:53:d3:d7:f7:6e:2a:b5:ed:
84:4c:6e:0e:40:d2:e6:06:e0:ab:ce:b3:95:39:80:
fd:9f:e7:c1:ca:3a:20:91:aa:08:cd:3b:ba:fd:ca:
12:26:33:ec:8b:f2:9c:b8:e8:ba:07:6b:db:9f:29:
c9:d3:17:22:a0:cd:17:a3:ca:69:f5:b4:45:4d:36:
66:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EA:08:B6:9F:7C:30:CD:7A:08:13:AE:B9:10:9F:7E:75:D2:AA:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/388522-5df8-4963-9c2c-cf305c54393e/1/x-oItp98MM16CBOuuRCffnXSqjg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.104.0/22
45.132.100.0/22
IPv6:
2a14:4d80::/29
Signature Algorithm: sha256WithRSAEncryption
72:c3:60:86:7d:fb:79:1d:bf:69:64:90:d1:d5:62:89:f8:54:
6a:24:54:f2:5d:77:36:04:23:ae:39:eb:fe:3a:55:50:89:4f:
1a:d3:e8:b3:81:e1:d7:ef:a1:ee:93:0e:fa:f0:18:5b:b3:3b:
6d:44:d0:c1:f7:50:3c:e3:1e:7b:a0:6e:fc:a5:f0:05:76:ed:
41:92:4e:92:cf:2b:d5:3c:97:02:b9:c8:24:67:12:8f:6f:1b:
15:72:8f:b5:63:b8:69:d0:e2:c4:f6:a1:0c:d9:3d:9a:fa:53:
a7:fc:0d:2f:9d:7c:bc:13:9a:1a:da:00:f4:ce:1e:5b:e9:a2:
5e:db:bf:4d:6d:ea:52:a2:d5:e2:97:24:d1:a4:33:64:1a:60:
d3:80:d9:43:be:6d:cf:35:0d:75:dc:b1:8b:78:af:52:f8:33:
95:2a:e6:fa:0b:f1:68:f4:46:3b:e4:5f:d1:3a:45:2c:e3:c8:
0a:f3:61:f3:e6:89:ee:10:56:26:2e:52:bc:d5:8e:a4:45:a2:
66:e1:2b:6d:b7:46:28:43:9d:99:a3:36:63:2a:bc:7b:9c:ed:
7e:a2:0b:70:7e:2a:c3:28:e5:a6:74:6a:45:da:71:31:6f:82:
3e:20:23:a3:fc:90:60:8c:50:0e:a3:27:d5:e8:c3:94:9d:96:
0a:3b:c6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 08:27:58 2025 by rpki-client