Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M8Ww18CpzSS3PNy5LIdG6FpKW48.cer
File: M8Ww18CpzSS3PNy5LIdG6FpKW48.cer (raw, json)
Hash identifier: Cj1c5y1uVlB5uQWC98KK3HJvx4D5PtuTRWTNj/Lolx4=
Subject key identifier: 33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274830174F5A4CD3A0BA484AF26A8298
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.149.107.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:30:17:4f:5a:4c:d3:a0:ba:48:4a:f2:6a:82:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33c5b0d7c0a9cd24b73cdcb92c8746e85a4a5b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4b:e9:c1:ab:68:49:b4:c1:8f:8e:cc:65:2d:
0d:10:f7:dc:1a:5d:67:c9:14:32:36:ec:af:11:85:
8a:57:f7:ef:5d:c7:49:e5:07:6f:5e:0f:81:9e:21:
23:f2:b6:74:fd:83:93:9c:83:ac:ac:57:90:cd:0d:
36:97:01:70:f5:99:4b:c2:60:f0:5f:8b:74:f3:f7:
31:a8:38:a0:5a:1a:c0:b8:5a:32:95:61:35:61:8e:
54:cc:7a:cc:5f:7c:ec:40:2d:65:ab:47:1a:26:6f:
f4:28:3e:66:25:26:ac:82:26:fc:fb:5f:1f:0c:ba:
58:d4:40:56:b3:78:0e:45:dc:02:7f:cf:1a:1d:f7:
af:64:7e:e9:9a:32:41:cb:28:4b:88:cf:d3:f8:81:
81:c0:a1:40:f7:2f:ae:f5:31:48:7f:e5:d8:f8:cc:
26:cf:21:c3:37:5e:c1:05:be:93:c0:7c:47:7e:60:
82:38:03:ef:01:e6:e9:87:a2:dc:0f:c8:52:63:4d:
5b:7b:98:a2:79:c2:99:ca:e3:c9:55:bd:a4:47:ec:
60:cf:36:01:b5:83:07:a6:c7:f0:6d:84:d9:97:80:
84:85:ba:ee:47:66:75:87:a3:9d:72:a1:d2:ea:8b:
08:e0:6f:58:25:1b:05:dc:e8:dd:2b:3d:2d:19:1b:
7d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C5:B0:D7:C0:A9:CD:24:B7:3C:DC:B9:2C:87:46:E8:5A:4A:5B:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/2581f4-8410-4a43-9186-0fab2269ea8e/1/M8Ww18CpzSS3PNy5LIdG6FpKW48.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:3c:80:f3:0f:e5:f4:45:e8:11:40:1f:d1:6d:13:7b:b9:e8:
c0:b8:3e:a9:af:d5:4c:9d:02:e9:e4:07:a6:0d:59:78:0b:f5:
ac:8b:cc:5b:e3:85:3d:d0:54:ef:b6:77:dc:16:ab:02:53:35:
22:99:ee:b2:f2:02:6d:ba:bd:bf:ce:a4:11:a4:28:ef:c7:66:
68:92:15:a1:76:2f:73:60:40:32:44:52:91:d4:2b:5f:82:6a:
80:c6:62:27:21:73:42:b0:d2:c1:44:f6:74:af:38:dc:62:34:
bd:1a:12:ba:eb:09:fd:1c:61:9c:52:f7:26:54:1d:79:f7:2b:
29:30:20:27:7a:c0:5a:a2:54:b5:26:be:30:3e:45:93:fa:d4:
c2:d5:de:c2:5f:0a:82:12:df:06:da:37:3e:17:f8:16:a5:73:
75:14:76:d9:f9:c6:9f:d5:3f:6b:2c:b5:05:d2:60:cb:73:30:
39:b7:bd:b8:d8:a9:6b:e6:d6:26:96:ff:06:2d:58:b0:47:1c:
b3:82:17:33:32:ab:3c:de:6b:a5:b8:9f:b4:3c:74:10:5e:4b:
52:5d:46:0d:09:7c:12:1c:01:16:1a:4e:c4:ae:3a:44:37:4a:
87:11:82:81:f6:fb:45:a9:37:f7:26:91:27:00:b2:5b:ae:4b:
14:2b:46:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:28 2025 by rpki-client