Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
File: E5Mngu53WJkEBPocz7CewjqGEj8.cer (raw, json)
Hash identifier: SubHk2+wDMwRW5Xc4UnuFDtBSWuvg6MkZwJ8GdmPWVc=
Subject key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01949335F8A756862F2931350D78D0A283B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 23 Jan 2025 12:49:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 3344
AS: 9153
IP: 46.248.96.0/19
IP: 82.136.0.0/18
IP: 85.116.0.0/19
IP: 194.1.148.0/24
IP: 195.22.128.0/23
IP: 195.68.206.0/23
IP: 2001:4088::/32
IP: 2001:4bd0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 15:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:93:35:f8:a7:56:86:2f:29:31:35:0d:78:d0:a2:83:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 23 12:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13932782ee7758990404fa1ccfb09ec23a86123f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fa:dd:48:2c:ed:a3:b5:d7:2f:5e:bc:df:9a:
1d:c4:f9:67:94:59:1f:fb:de:dd:dd:be:cb:ab:ad:
6d:58:c1:06:d7:75:ea:1b:e5:37:ed:e7:72:f9:28:
cb:75:7e:fa:8f:72:8d:6c:37:62:ed:88:5d:ac:52:
07:47:10:26:51:e7:20:50:0f:be:7f:7e:63:a0:ea:
6a:6b:e1:37:e9:a4:6e:a6:51:d8:7a:c4:6b:90:d5:
6c:dd:47:10:45:a7:59:33:14:8b:86:c2:d4:e1:82:
5e:08:8f:ac:12:4a:e3:45:30:f4:d0:fc:54:d5:bf:
47:60:5c:82:d5:72:30:00:09:ee:6c:f1:c7:76:2f:
69:9b:24:96:29:00:15:6f:c2:5b:25:8e:31:64:ba:
c5:84:39:59:de:1e:50:15:93:71:a9:0e:43:5c:ff:
7b:bc:f7:e7:84:be:08:05:c7:61:75:25:c7:69:2b:
32:39:12:6b:b9:dc:bb:1f:53:3f:ff:c3:0b:8b:3c:
b8:0d:04:53:89:c6:6a:19:8b:62:06:37:68:16:b4:
fe:1d:6e:ea:41:e1:b3:d1:86:ad:f7:c7:ff:97:f2:
cd:d5:4d:5c:8c:1a:a9:b3:da:0b:bd:d3:20:8e:ef:
a9:d4:4c:61:86:e5:9a:36:b3:28:00:45:0c:55:6c:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.96.0/19
82.136.0.0/18
85.116.0.0/19
194.1.148.0/24
195.22.128.0/23
195.68.206.0/23
IPv6:
2001:4088::/32
2001:4bd0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3344
9153
Signature Algorithm: sha256WithRSAEncryption
97:fe:72:1e:08:71:92:d8:63:3d:ff:ba:2c:72:7a:57:58:0a:
3c:64:91:04:d6:6d:c4:a2:5f:cb:c0:43:c3:5a:30:18:5f:de:
3b:e4:ed:45:08:29:15:48:7c:25:80:58:5f:04:66:a1:a0:27:
9d:6e:2f:3a:85:33:ad:9c:d8:e0:f9:da:47:01:ad:b6:d9:ce:
fc:47:70:37:46:17:b4:fd:c3:ba:81:15:fb:e4:5e:82:36:24:
3f:41:a6:6c:ea:4b:04:e9:9d:7c:43:9a:53:e8:0d:cf:97:9a:
e3:13:3d:89:f8:d1:2b:26:75:46:e2:91:b4:cb:8f:8f:1c:b0:
00:33:28:4e:28:08:0b:ad:cf:bc:9a:5c:62:5c:f6:12:4e:9d:
f4:24:f8:dc:2d:e2:2e:7e:5e:fd:e0:b5:c8:ce:42:eb:29:09:
ec:9d:dd:06:32:fe:a2:98:79:65:71:1d:14:be:27:14:5d:ca:
36:2d:5c:e4:85:c4:7d:c5:4a:61:3f:b4:78:70:f5:87:bd:9c:
b1:bc:df:6c:88:6d:9f:59:49:dd:8c:3b:9a:34:34:2d:db:d8:
d5:df:03:30:ac:21:26:e6:fe:dd:8d:24:81:77:67:ef:1f:c9:
63:36:88:69:9c:54:5a:79:c1:3d:e5:9b:4d:64:7c:3f:76:64:
a2:86:fa:c4
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgISAZSTNfinVoYvKTE1DXjQooO5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTIzMTI0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzkzMjc4MmVlNzc1ODk5MDQwNGZhMWNjZmIwOWVjMjNhODYxMjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/rdSCzto7XXL16835odxPlnlFkf
+97d3b7Lq61tWMEG13XqG+U37edy+SjLdX76j3KNbDdi7YhdrFIHRxAmUecgUA++
f35joOpqa+E36aRuplHYesRrkNVs3UcQRadZMxSLhsLU4YJeCI+sEkrjRTD00PxU
1b9HYFyC1XIwAAnubPHHdi9pmySWKQAVb8JbJY4xZLrFhDlZ3h5QFZNxqQ5DXP97
vPfnhL4IBcdhdSXHaSsyORJrudy7H1M//8MLizy4DQRTicZqGYtiBjdoFrT+HW7q
QeGz0Yat98f/l/LN1U1cjBqps9oLvdMgju+p1ExhhuWaNrMoAEUMVWyZPQIDAQAB
o4IC1zCCAtMwHQYDVR0OBBYEFBOTJ4Lud1iZBAT6HM+wnsI6hhI/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzY1LzgyODY1
Mi1hZGRmLTRmZTgtOWZlNi00YjFmNjE2NTNmM2QvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvODI4NjUy
LWFkZGYtNGZlOC05ZmU2LTRiMWY2MTY1M2YzZC8xL0U1TW5ndTUzV0prRUJQb2N6
N0Nld2pxR0VqOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF
BwEHAQH/BEQwQjAqBAIAATAkAwQFLvhgAwQGUogAAwQFVXQAAwQAwgGUAwQBwxaA
AwQBw0TOMBQEAgACMA4DBQAgAUCIAwUAIAFL0DAdBggrBgEFBQcBCAEB/wQOMAyg
CjAIAgINEAICI8EwDQYJKoZIhvcNAQELBQADggEBAJf+ch4IcZLYYz3/uixyeldY
CjxkkQTWbcSiX8vAQ8NaMBhf3jvk7UUIKRVIfCWAWF8EZqGgJ51uLzqFM62c2OD5
2kcBrbbZzvxHcDdGF7T9w7qBFfvkXoI2JD9BpmzqSwTpnXxDmlPoDc+XmuMTPYn4
0SsmdUbikbTLj48csAAzKE4oCAutz7yaXGJc9hJOnfQk+Nwt4i5+Xv3gtcjOQusp
Ceyd3QYy/qKYeWVxHRS+JxRdyjYtXOSFxH3FSmE/tHhw9Ye9nLG832yIbZ9ZSd2M
O5o0NC3b2NXfAzCsISbm/t2NJIF3Z+8fyWM2iGmcVFp5wT3lm01kfD92ZKKG+sQ=
-----END CERTIFICATE-----
Generated at Tue Apr 15 21:32:44 2025 by rpki-client