Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M54PXmVDk87aIttEl48nPnieI0E.cer
File: M54PXmVDk87aIttEl48nPnieI0E.cer (raw, json)
Hash identifier: 5eVQqoN193h9PcHYTAwV3AUZPhhBdsmT3d8FgRxb1QI=
Subject key identifier: 33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942823C0579DE0A8498A02D3270F335FFF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:50:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48019
IP: 91.207.66.0/23
IP: 194.105.136.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:c0:57:9d:e0:a8:49:8a:02:d3:27:0f:33:5f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=339e0f5e654393ceda22db44978f273e789e2341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:44:ed:e8:5d:91:47:63:ef:73:9c:24:70:d8:
dc:7b:d5:e8:a7:05:93:e1:5d:93:1a:67:c6:be:1e:
e9:a2:f0:18:1c:f4:06:52:f9:fb:53:b0:3a:a1:4b:
57:52:79:4c:24:f1:ff:4e:20:2a:c5:7a:94:6e:41:
91:ee:c4:e0:3d:01:51:67:c3:ee:07:19:bc:17:4a:
44:d8:93:b1:5a:64:13:00:44:7b:72:32:26:e5:55:
95:f9:31:69:b5:85:72:ae:f0:5e:98:61:c4:6d:92:
af:7b:a2:6e:3d:51:78:86:0a:59:54:67:83:0e:d6:
24:f0:0e:e4:f9:23:c9:95:07:32:5f:50:ba:2b:46:
fd:f4:1e:a3:66:02:e0:49:f0:19:02:88:7d:dc:7c:
ee:53:ba:5a:f0:29:f7:d0:91:20:5e:7b:56:0a:41:
02:c5:22:c0:0e:91:dd:89:7d:75:6f:b7:2f:9d:ab:
15:aa:fb:e6:74:3f:fa:db:36:4c:fd:1c:9a:39:11:
81:1e:b9:9c:c6:c2:cf:4d:45:e2:0e:d0:83:9f:bd:
18:60:a8:7a:ed:a5:7d:29:81:17:65:70:21:6d:d0:
a2:06:9c:3c:c1:95:8d:a8:88:cc:e8:4e:32:f7:20:
8e:5a:2f:63:7b:9b:a9:d3:2f:5e:71:89:d1:a8:02:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9E:0F:5E:65:43:93:CE:DA:22:DB:44:97:8F:27:3E:78:9E:23:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/36b098-e9ac-4910-a6f5-8e5d9eefaf91/1/M54PXmVDk87aIttEl48nPnieI0E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.66.0/23
194.105.136.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48019
Signature Algorithm: sha256WithRSAEncryption
a2:6a:ab:6e:f1:d7:33:74:c6:ca:b3:c9:05:04:97:33:b5:d3:
cc:f4:16:af:ef:4c:a5:6a:01:03:e2:b8:16:a8:5b:8b:6b:08:
99:ec:6e:30:43:51:53:b3:36:d6:a2:ea:fe:6a:82:9b:04:a2:
a4:32:fa:32:67:cc:0c:6e:ca:fc:84:58:36:bc:4a:a5:97:bd:
85:ab:66:42:94:b4:f9:01:c4:72:c6:7e:5d:bd:18:0a:81:92:
1d:a5:33:a2:19:25:be:f9:90:32:b3:c5:cd:2b:5c:5c:cc:0f:
87:72:54:15:44:51:18:70:99:d4:38:87:6f:eb:a2:0b:44:7f:
15:a7:ce:e1:bc:c3:47:32:c6:5e:22:d6:f1:59:4f:63:53:8f:
b7:18:43:d1:61:c0:36:96:1a:bb:c2:09:0b:10:a7:f1:ed:10:
36:5e:05:5b:78:76:fe:07:77:2e:dd:b1:0b:71:00:3e:70:b1:
23:e8:25:f6:7e:d1:b4:fb:60:ba:eb:02:14:c7:31:b4:52:2f:
8a:16:fa:58:de:ab:29:7e:01:e6:be:57:dc:60:c7:93:0e:8d:
bd:24:e5:1a:97:d1:d7:be:1b:e0:fb:97:c1:b3:e2:f4:9d:7d:
74:e5:c7:bd:7b:06:ce:a3:42:97:9e:34:d9:95:03:4c:36:6c:
08:ff:15:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:41:08 2025 by rpki-client