Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
File: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer (raw, json)
Hash identifier: k16bK9g5gLaZj8bRLUfy4xOO+PWW0KvwRvknUkS0aPc=
Subject key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB3EE438A1F67AFAC4BC68CE0213EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39121
IP: 193.105.126.0/24
IP: 195.66.89.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:3e:e4:38:a1:f6:7a:fa:c4:bc:68:ce:02:13:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c5:43:80:56:98:42:33:3c:80:a7:88:bd:e2:
9a:c2:b2:f4:2b:09:6f:5c:bc:12:db:75:ae:de:8f:
0b:e3:2d:b7:1b:60:e2:9d:45:c0:ad:5b:b9:31:76:
b5:fb:ed:3a:b4:d9:e9:1d:c5:38:fb:2a:db:41:e6:
93:49:b2:18:17:ed:57:43:14:7a:1f:cd:91:ed:b7:
82:81:0e:89:b0:b1:e1:14:b0:62:27:d9:e4:04:15:
31:c6:ea:ab:e0:ee:0f:fa:19:b9:b5:52:be:7a:52:
aa:f5:a4:6c:9e:c2:e1:d1:37:c9:49:75:43:87:9b:
68:5d:4a:67:e5:b9:3d:54:dc:9b:90:5a:85:59:c8:
18:1c:0b:41:39:ac:e0:c2:38:dc:81:dd:77:96:72:
e1:e1:be:56:c1:ea:28:02:86:07:e9:80:87:f8:e0:
99:e7:73:f2:04:89:74:d6:17:75:00:27:d4:c1:3b:
0d:1c:ac:7c:92:b8:a7:59:d4:a6:01:81:d6:7e:50:
c1:4d:ca:4b:10:c3:2b:83:a6:6d:15:5b:f1:50:bb:
00:88:a9:fe:e7:97:71:ff:c0:93:3f:88:9a:0d:c6:
0a:15:f1:7e:84:af:45:d6:ed:85:2a:33:a5:36:40:
9b:15:5b:2c:66:67:b3:85:79:03:8a:1a:fe:9d:6f:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.126.0/24
195.66.89.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39121
Signature Algorithm: sha256WithRSAEncryption
8b:66:2a:03:13:d1:e7:8a:f3:27:cc:6f:bf:92:bc:c0:2c:8d:
20:16:d9:40:c2:ce:c1:e0:d6:e6:c9:46:19:20:75:35:27:2c:
93:6d:d4:56:67:d6:81:19:55:28:a5:4d:df:28:81:78:96:f2:
91:85:92:39:80:3c:8e:25:8f:e4:d1:5e:93:0e:36:b8:77:1c:
07:d3:ff:65:11:2a:cf:68:96:3a:3a:c0:61:80:47:20:39:42:
db:d5:41:11:29:f2:9d:2b:fa:62:f2:b9:a4:01:fe:3f:be:cd:
8c:c6:ac:e2:52:1d:c2:b7:46:c2:5e:00:c9:ac:c7:8e:72:7f:
7e:8c:74:b9:74:a0:52:9d:8a:cc:2e:0c:11:85:ae:80:e5:74:
bd:35:6c:67:86:a5:68:3f:c2:78:d6:18:ed:70:4b:dc:a6:99:
15:9c:33:ce:80:1a:04:55:e2:3c:fe:77:41:86:2e:8c:2a:2f:
d4:4a:f0:34:85:c8:60:4c:b6:7d:ad:ff:15:3f:ad:d6:fa:dc:
78:95:39:e3:7f:a2:70:2b:ec:18:1f:c3:7b:af:c8:d8:40:c9:
7e:81:35:77:88:04:bb:2b:57:78:a5:e7:57:81:74:fe:9c:09:
03:b4:76:b5:71:c3:5a:d0:66:33:30:a2:a8:d4:0a:bd:ff:c3:
cf:63:e3:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 20 02:07:19 2025 by rpki-client