Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer (raw, json)
Hash identifier: cMEnjlE+vZpYQYHIWvgRdkMwORdw32MvZ1os43FybIE=
Subject key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C99F757784B34EDB597C18780BF47
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39761
IP: 45.11.132.0/22
IP: 45.14.156.0/22
IP: 45.83.212.0/22
IP: 45.87.12.0/22
IP: 81.90.240.0/20
IP: 84.246.160.0/21
IP: 185.153.72.0/22
IP: 2a00:1268::/29
IP: 2a0e:6d00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:99:f7:57:78:4b:34:ed:b5:97:c1:87:80:bf:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b0:71:36:8b:5d:89:5d:d8:a3:d2:bc:b6:e6:
df:5b:3e:9b:b4:cf:2d:72:cd:f7:c9:85:41:91:5f:
25:53:14:33:6c:65:a2:52:21:36:52:a8:6b:a4:e6:
21:f8:e6:c4:58:be:5c:07:0d:8d:30:45:96:59:20:
46:42:33:09:a3:27:2b:b3:2d:4b:b0:81:12:8f:11:
cc:70:3f:7d:aa:9f:34:97:31:10:9c:5c:62:68:e8:
41:fe:75:1c:58:8d:6e:1a:58:bc:3c:14:65:7f:e8:
7d:44:30:c1:23:da:e9:82:2c:b4:c5:b9:d5:a6:33:
5c:d3:b2:82:a3:44:40:d2:b0:48:36:84:3b:d8:43:
c7:03:db:98:37:8d:ad:29:b2:00:4d:a6:fc:1e:40:
50:3e:9a:17:ec:f5:09:e2:09:1a:16:47:1f:b5:37:
5f:e2:48:57:47:c2:09:36:6f:86:b8:c5:09:e3:a5:
f4:b7:1b:f7:ee:71:22:60:23:f4:de:cd:4a:10:e7:
dd:fd:ba:f1:4b:db:7e:c0:15:dc:25:fd:a8:8e:19:
ba:06:cb:ed:a6:9b:2f:5a:8b:7b:b1:36:70:1b:ce:
8a:a5:76:82:7b:b9:63:94:d1:ff:9e:8b:7c:70:91:
9a:50:37:1b:7a:d2:7b:dd:f8:cd:80:3d:52:18:70:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.132.0/22
45.14.156.0/22
45.83.212.0/22
45.87.12.0/22
81.90.240.0/20
84.246.160.0/21
185.153.72.0/22
IPv6:
2a00:1268::/29
2a0e:6d00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39761
Signature Algorithm: sha256WithRSAEncryption
99:4d:13:c5:41:10:05:ff:64:9d:e2:e1:1a:94:3a:66:2d:04:
39:87:f6:44:b4:ea:9a:f7:3e:3c:ce:5f:ae:d3:8c:91:53:53:
df:ca:88:1c:dd:75:0d:c3:85:b2:60:71:1a:f8:f6:7d:a8:7a:
a1:d9:da:4b:80:70:46:08:e9:70:ee:36:15:84:59:d2:41:8c:
c7:df:2b:ba:48:06:77:d8:da:bc:9c:0a:de:aa:d9:d8:57:f7:
ef:3b:8a:3f:f7:d0:00:ed:10:a3:82:69:f2:83:12:39:de:6d:
c9:ba:27:6f:4d:10:2c:f0:b0:65:84:56:4f:d8:af:57:13:64:
14:d3:ae:95:cf:68:5e:01:63:bb:a7:91:47:8b:94:29:61:d4:
f8:b7:aa:65:21:54:98:fd:3c:1c:00:22:f9:d2:37:d4:a5:26:
97:94:b9:d5:90:5b:48:fb:b0:25:d8:5e:60:77:51:cb:07:89:
3c:7a:0c:4c:8f:3d:10:cb:4e:1b:58:1f:91:90:8c:ca:13:7f:
c1:cb:5a:53:c4:bc:e5:e5:69:81:71:a9:0f:c2:b2:29:cd:92:
bf:c6:66:38:14:1a:aa:29:b0:ae:30:e2:6f:40:38:41:e6:a8:
d1:b5:87:2a:4d:48:bf:4a:bd:1a:0c:3e:d3:ca:08:99:ba:5d:
b6:bd:f2:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:24 2025 by rpki-client