Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
File: 4MKGY5gUKldLpHsZfXF5G14jr3w.cer (raw, json)
Hash identifier: ZE8bA9dAEEyxmhRDCY6nQ7S79/DO0Nx/gl0BUnqpShM=
Subject key identifier: E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747B7F722F17F178A00398DAE49F096
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21336
IP: 80.243.192.0/20
IP: 212.27.128.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b7:f7:22:f1:7f:17:8a:00:39:8d:ae:49:f0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0c2866398142a574ba47b197d71791b5e23af7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:35:39:73:fa:a6:ac:e8:56:d8:b8:d9:1e:cd:
e0:e5:f0:b3:57:c4:3a:31:13:bb:02:37:17:60:97:
f7:d3:ea:fb:9b:a9:c5:ad:16:7c:63:77:f3:ec:c8:
17:67:39:ab:fd:be:bb:3a:5c:7f:07:40:e8:92:e5:
a4:68:bf:df:c9:5b:8d:4a:6b:75:d1:fa:24:00:c7:
45:7c:5e:61:00:f0:b4:bf:7a:bc:36:76:f1:28:4a:
d1:d7:a8:d4:46:63:a8:ac:19:6a:08:de:dc:52:c7:
20:02:a4:e4:df:14:e8:80:b2:5d:5d:16:c5:0e:74:
2d:4f:c1:06:fb:ac:c4:fb:65:81:33:ba:a9:c0:2f:
e0:c6:83:78:c7:9c:74:53:b6:15:83:1d:d2:91:10:
84:75:3f:f9:0c:cc:07:04:38:be:b9:48:24:41:84:
57:fb:85:b7:61:e3:bb:97:42:49:10:39:84:bf:bb:
a9:5c:e0:2a:18:85:45:2e:2c:13:93:8d:44:9f:29:
25:fb:50:de:21:02:cb:bc:ee:7b:7e:7d:a9:5e:83:
fe:35:91:a9:c1:c8:7d:31:e6:41:d0:cc:c4:fb:87:
72:93:eb:a6:cf:62:b2:8a:d7:dc:29:3c:03:81:1d:
69:ad:87:7d:f9:e0:b7:80:ad:09:5f:5d:98:ca:24:
18:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.243.192.0/20
212.27.128.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21336
Signature Algorithm: sha256WithRSAEncryption
04:12:08:a8:4d:55:49:12:0d:41:63:59:82:53:f0:9d:36:32:
29:05:92:3f:5f:d7:a7:f9:2c:4c:92:92:be:1c:5b:67:9f:6f:
96:31:40:53:2a:37:ca:62:83:f8:1d:58:74:c0:6f:34:d7:f1:
27:51:e8:06:55:ab:df:a7:32:5e:b4:b6:7f:ed:6a:34:fd:23:
73:a2:b3:b2:5f:3a:f2:6f:5c:69:98:72:a9:a1:6a:17:f0:ac:
8e:7f:d4:95:ec:c2:eb:3e:10:d4:64:20:63:22:90:6f:39:5e:
d3:53:a3:ac:e1:60:21:49:cd:06:90:c0:28:53:cc:4d:aa:27:
e4:ec:2c:78:23:1b:09:9f:13:f8:38:22:9c:7e:1f:f8:5b:54:
da:19:a9:b1:ce:9e:d8:b1:f8:cc:4f:93:39:36:c5:9f:66:d8:
4b:27:3e:e4:5e:b8:de:e0:63:a7:e0:e2:08:44:81:76:c6:3a:
ed:fe:ce:a0:1e:b6:d7:80:b2:21:17:4d:78:9e:71:c0:00:c0:
ff:ad:10:6d:41:a5:62:57:53:ae:c4:0e:be:a2:b4:d2:0d:c6:
04:1e:18:7e:5f:bf:b6:2a:ac:d9:b5:39:5c:a0:35:16:2c:d1:
32:b6:fb:81:0d:86:ef:d0:de:10:98:bd:cf:35:56:ab:ed:6f:
cc:35:50:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:01:29 2025 by rpki-client