Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LMNcIJCZlCHTPGNZybbmgYKg8nM.cer
File: LMNcIJCZlCHTPGNZybbmgYKg8nM.cer (raw, json)
Hash identifier: Vj6PVjz/xbvVkwplhD43KlmwTiVsb0WEG+KoIcAlA1U=
Subject key identifier: 2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942068390B163278F47D8BAFCA170BCC85
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.160.248.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:39:0b:16:32:78:f4:7d:8b:af:ca:17:0b:cc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cc35c2090999421d33c6359c9b6e68182a0f273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f3:f4:ee:b0:18:d9:45:53:6d:ef:1d:7c:3e:
e8:8b:7a:ff:80:fd:1c:6a:db:e3:34:ee:b2:18:a5:
0d:4d:b5:32:52:19:22:79:e3:f7:9c:c0:44:b9:8f:
cb:76:f8:f1:e9:37:6e:b9:50:9f:df:6c:30:8f:cf:
45:1d:6f:bb:98:ca:6b:99:a3:6a:b2:8a:ea:55:45:
c5:43:37:c3:53:e6:47:c0:84:df:77:77:b3:f6:b0:
d6:08:2e:c3:7e:d8:09:b4:f0:c1:26:82:37:18:47:
ae:a3:1b:3e:99:05:9a:f0:82:b7:c8:ad:3a:da:9a:
14:e7:81:e9:82:eb:b5:da:b2:ad:3f:61:ff:e6:e7:
45:7b:01:f9:a1:b5:5a:79:08:53:7f:4c:d8:66:3c:
8d:20:21:73:92:1f:fc:d9:0d:e0:ec:8c:4d:18:21:
69:0c:02:08:25:a9:35:95:e3:d2:c0:7b:27:0c:52:
b9:b7:c8:70:26:17:19:38:d3:32:59:5c:47:a3:5c:
05:8a:6e:27:a6:6d:19:4b:dc:c5:4f:a6:c9:1d:1b:
45:c7:45:b5:cb:c6:c6:16:df:4b:c8:44:11:2b:28:
9d:99:30:2a:19:18:88:82:e9:e0:b7:48:9c:42:76:
4e:40:40:74:9b:1c:f3:01:a2:e0:d4:4e:f2:d8:76:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C3:5C:20:90:99:94:21:D3:3C:63:59:C9:B6:E6:81:82:A0:F2:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c637de-bef7-4da3-803f-84e5f1af6e92/1/LMNcIJCZlCHTPGNZybbmgYKg8nM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.248.0/22
Signature Algorithm: sha256WithRSAEncryption
42:e1:7a:6d:65:63:0e:df:d2:77:9e:4a:41:99:0f:d4:1c:16:
83:9e:ad:08:55:b6:4f:ac:f7:30:52:fb:45:2b:ce:03:f9:83:
06:cb:76:49:8b:7a:8e:58:a4:10:75:9b:4e:a3:2b:6b:1f:60:
a6:67:74:eb:6c:d9:49:f3:52:8b:72:62:df:6d:29:a0:30:c8:
f0:ac:24:01:5c:f4:c6:be:56:a9:7f:6f:fc:ef:dc:69:9c:7c:
78:4f:86:8a:ce:c2:38:c0:27:d1:99:c8:2e:94:a9:9e:ad:10:
da:3b:44:f0:c6:07:bf:5f:4e:8b:bb:67:e0:c1:83:97:48:79:
97:f5:cf:7e:d9:22:25:fc:e7:8a:c1:47:27:6f:55:ea:a5:53:
1f:88:33:66:8e:fc:73:45:de:48:67:1c:3b:0d:0a:7d:81:fe:
98:c2:a3:04:f5:ee:dd:12:c3:7b:7d:af:50:4d:9e:a1:9d:01:
a8:4c:19:76:7b:b8:a3:68:3c:75:ff:a4:44:dc:5b:d7:84:56:
fa:1f:26:55:ce:99:60:2c:f6:25:be:de:db:d3:2b:4d:bb:c3:
cf:94:32:6e:17:f4:58:54:d1:d1:b6:ae:ce:82:66:29:22:95:
3a:39:56:5d:e8:8c:e9:05:35:fc:cc:b3:b8:44:95:cd:ab:af:
e9:90:45:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:59:52 2025 by rpki-client