Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer (raw, json)
Hash identifier: geLFr4fSftXZ/mrxIZ3nM/Tlzw7lXWYSeBWps+H/oQw=
Subject key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C1E01B32B68A02DAE515CDAE9456B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29611
IP: 45.157.84.0/22
IP: 185.2.216.0/22
IP: 185.43.184.0/22
IP: 185.73.184.0/22
IP: 217.68.240.0/20
IP: 217.69.32.0/20
IP: 2a00:c20::/32
IP: 2a03:2d20::/32
IP: 2a04:95c0::/29
IP: 2a0f:5280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1e:01:b3:2b:68:a0:2d:ae:51:5c:da:e9:45:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:db:3b:10:80:91:17:27:a4:a1:49:2d:39:ef:
57:e2:09:9f:e3:d8:ec:f5:f9:96:ca:c2:d9:64:2f:
a9:c7:ee:58:aa:5d:d7:29:fc:8f:4a:65:78:9b:04:
81:e3:5d:5d:83:7b:ae:7c:9e:ba:1a:27:d6:c1:38:
67:92:61:89:ee:46:25:5d:5f:9f:0c:82:13:39:18:
d1:52:12:a3:2b:1c:8b:3f:84:93:d0:f1:89:40:71:
2f:1d:52:74:a2:10:90:a2:c1:c8:d1:93:96:6c:f5:
9b:fd:eb:bb:6d:7e:73:40:6b:a6:fa:ed:af:e5:96:
0e:1d:84:21:9c:2f:7a:b9:5b:3f:7f:a5:12:30:2e:
e7:8a:65:d3:74:a9:08:b5:ff:c2:d9:1d:1b:01:ae:
ca:df:bc:df:d9:3c:bc:75:32:56:22:93:0f:87:9f:
3b:3d:69:60:b4:2f:a2:ed:f5:f5:48:2a:59:a7:dc:
7a:59:b3:89:9d:32:46:3a:90:9f:f8:32:43:22:20:
72:43:91:fb:8c:b6:2b:7b:9b:4f:3c:9c:e6:02:a4:
81:a8:f1:c0:08:f4:ee:31:15:34:ac:00:19:bf:6a:
76:df:35:7e:1f:7e:96:56:b9:8e:87:95:5f:24:8f:
b3:aa:8f:6b:56:b8:de:c4:5c:ec:23:24:94:9c:86:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.84.0/22
185.2.216.0/22
185.43.184.0/22
185.73.184.0/22
217.68.240.0/20
217.69.32.0/20
IPv6:
2a00:c20::/32
2a03:2d20::/32
2a04:95c0::/29
2a0f:5280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29611
Signature Algorithm: sha256WithRSAEncryption
88:a3:a7:37:41:fd:f6:5f:26:56:23:e2:14:84:2b:7b:59:36:
76:f5:7e:a5:c3:9e:02:d2:7a:08:5f:f4:0f:02:70:28:01:e7:
2a:98:4e:d0:d9:cf:48:a5:95:0f:76:c3:0e:6f:d2:f8:91:b3:
28:2b:c7:7a:ad:49:72:2c:8c:06:d6:37:d3:2f:db:23:3e:6b:
a5:0e:08:0a:1b:b7:c0:4f:1b:ee:81:47:28:6c:bc:e2:e9:2c:
a6:60:6b:aa:46:b7:18:3a:36:4a:09:fa:6b:ef:f9:39:ff:dc:
85:2d:6d:13:45:6c:14:0a:e0:33:a2:f4:d3:0f:17:80:ae:b8:
66:5c:78:e7:86:4c:0a:05:09:a6:1a:5b:1f:b3:f0:22:79:92:
df:1c:f2:28:e2:bc:67:0d:0d:68:f8:20:a1:6a:71:bc:a4:00:
50:98:f0:12:bb:61:ab:84:04:3c:22:f9:c8:c7:5f:64:83:cf:
b0:57:c1:98:14:e3:31:e2:6b:46:a0:94:59:44:2d:27:89:7e:
b9:d2:f0:2c:a2:0b:2e:cc:2f:c9:93:61:1d:e2:45:d7:ae:30:
db:8a:c8:ac:6a:6f:3d:a2:8f:fe:95:ff:0f:0a:e7:a2:9b:03:
68:81:00:30:4a:52:25:9a:99:90:d2:4b:f8:1b:d5:0b:61:05:
96:09:33:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:43:14 2025 by rpki-client