Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M6Udf_AtIfrBk65K7R8MOVbORRU.cer
File: M6Udf_AtIfrBk65K7R8MOVbORRU.cer (raw, json)
Hash identifier: nhpB99nqAOQiINfqTK34DM6JCW+r+GWHduF4/gZlbwI=
Subject key identifier: 33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD2BBAA7076F1FCB798979D53043A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.53.0.0/24
IP: 2001:67c:2c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:2b:ba:a7:07:6f:1f:cb:79:89:79:d5:30:43:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33a51d7ff02d21fac193ae4aed1f0c3956ce4515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:43:8b:35:6d:69:8e:63:65:d9:c4:33:7e:2d:
d7:8c:b4:45:84:6a:7c:67:18:ee:91:9f:40:36:6e:
1a:da:f3:ef:c5:5d:b1:71:07:6a:f9:ef:e7:9c:b8:
cb:eb:f7:9c:75:93:7d:9a:6b:ee:fa:96:f8:47:ec:
3f:83:bb:ed:d8:f9:37:93:5e:5d:50:8f:eb:f3:fd:
a4:83:28:8c:a5:ea:72:fd:1e:99:d7:30:59:64:ae:
17:b6:39:73:78:32:fa:cc:46:2a:52:26:29:be:68:
50:41:54:36:fb:c9:6a:36:62:6f:3b:3c:b8:9a:ae:
0a:2f:d2:7e:f8:e0:70:69:ed:67:7a:34:12:49:f4:
93:24:2d:25:f4:6e:9e:65:69:e7:bd:9d:ab:7e:bc:
a6:cf:aa:b3:14:f6:09:71:33:f2:a2:44:0a:e2:35:
64:8f:40:21:a0:93:cf:d3:73:f8:b7:b6:12:53:88:
46:6d:d3:cd:82:9b:b3:e0:fc:8c:0d:6c:e0:e3:69:
06:c8:a6:57:5a:d7:35:df:44:be:3c:b2:9b:c2:a6:
6a:c9:c8:3b:72:a5:89:d6:96:f9:a0:25:05:d6:66:
26:80:f0:9b:f3:f8:db:86:b7:7e:18:7f:37:3d:6f:
6a:cc:e4:3f:da:4b:15:6f:71:a6:74:a8:41:4c:55:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A5:1D:7F:F0:2D:21:FA:C1:93:AE:4A:ED:1F:0C:39:56:CE:45:15
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/518e42-ebae-4547-8b22-9b1e6a8e40f3/1/M6Udf_AtIfrBk65K7R8MOVbORRU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.0.0/24
IPv6:
2001:67c:2c::/48
Signature Algorithm: sha256WithRSAEncryption
64:93:b2:bc:ae:eb:d8:d2:7b:19:85:cb:22:8c:96:48:ff:3d:
e4:db:9f:ec:7c:4a:f0:0b:8f:b6:c0:ec:26:14:12:f7:28:ac:
44:13:6e:d2:e1:11:97:04:7c:d8:77:c5:3a:03:ea:a9:79:59:
4b:42:c7:06:9e:82:9d:21:89:4b:2e:9f:5e:ee:69:e9:d5:d7:
f2:6d:fe:92:0f:31:dc:d7:26:fc:64:c9:0b:62:48:17:59:f4:
e2:8e:12:d0:61:f0:c6:b7:0e:2a:14:3f:71:34:fc:74:99:3b:
13:8a:8c:0a:5d:aa:65:8f:0a:30:3c:e1:84:2d:7b:55:b5:95:
08:93:2d:df:10:06:cb:3f:e1:81:13:b8:7d:9c:d7:fd:23:ae:
fa:dd:2f:56:47:94:83:cf:54:3d:c2:0c:54:94:2f:48:7b:98:
98:31:a5:cb:8f:43:c4:90:ea:66:ea:13:74:3d:3c:a1:e9:5d:
b6:5c:93:55:f2:68:b3:52:24:69:6b:6d:01:9d:ae:cc:1d:e6:
70:fe:52:b4:3c:55:46:80:ca:fe:3f:11:44:1b:9b:bf:4f:ec:
18:d7:53:d6:ec:75:0f:4a:d8:3e:09:58:ff:fe:54:21:01:68:
8f:9e:1b:ea:f2:74:86:3c:4c:d5:f8:98:c8:9d:1a:79:8e:b9:
ec:85:5c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:28:44 2025 by rpki-client