Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer
File: MMRfwxRxAoJPnS1Ud2aoCa6vJFo.cer (raw, json)
Hash identifier: IwprXTu4+QhYoTwEDBnZ2J6Lq59f3E+Q0ldI/wrNGjc=
Subject key identifier: 30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5A7F6754A7F5C0DC2F264DD314F4F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58350
IP: 176.115.0.0/19
IP: 2001:678:258::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a7:f6:75:4a:7f:5c:0d:c2:f2:64:dd:31:4f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30c45fc3147102824f9d2d547766a809aeaf245a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:fe:b6:74:69:19:eb:3f:52:6a:d5:a6:ea:55:
4c:ed:c6:10:65:47:f0:1a:1c:a3:b3:1d:cc:a4:20:
e7:db:15:fd:be:c8:59:c5:65:7c:db:1f:24:32:97:
4e:78:cf:09:26:33:25:8c:74:30:ae:d2:28:dd:4c:
13:0a:6d:a7:c6:e2:bd:b4:33:21:9e:1a:56:32:5b:
bf:fa:f2:53:ab:4f:17:b1:e3:db:e5:47:83:29:1d:
78:9e:ea:f2:09:43:a5:48:47:0b:97:15:29:72:12:
f0:6c:20:b7:a7:42:b7:22:c8:5d:ae:01:c3:e1:ab:
96:de:0c:b6:74:85:3c:f7:42:f2:54:d4:dd:24:72:
1d:67:0b:8b:d9:10:4f:ed:d4:4f:dc:de:1d:c0:bd:
11:58:b9:08:df:01:98:0e:41:03:60:36:4e:c7:6f:
06:bb:ac:ad:7d:56:47:2b:7c:85:31:f5:54:fa:1e:
8a:89:d2:cf:bf:7c:d3:cc:9f:c6:93:e6:0d:46:00:
bc:be:d2:ea:78:2c:62:42:f9:ca:0c:6a:96:f0:d9:
96:71:26:89:6f:54:b9:71:ec:6a:6f:80:f2:e1:02:
1e:7c:dc:34:e0:b0:d9:45:87:2d:8a:d5:5f:16:50:
d4:50:71:47:82:79:00:6e:ea:17:fa:3c:20:1a:60:
55:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C4:5F:C3:14:71:02:82:4F:9D:2D:54:77:66:A8:09:AE:AF:24:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/22ad4c-0b05-474d-919f-3b540a6bc3dc/1/MMRfwxRxAoJPnS1Ud2aoCa6vJFo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.115.0.0/19
IPv6:
2001:678:258::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58350
Signature Algorithm: sha256WithRSAEncryption
76:ec:63:c6:e8:07:bd:b4:3e:1b:a9:50:12:f5:5f:eb:4c:89:
2c:77:16:d1:49:e7:fc:14:a9:29:ff:e0:61:c8:9c:25:fe:27:
70:d4:56:04:d7:fc:12:83:a5:44:fe:1e:34:52:f2:ab:b5:42:
ab:47:93:98:00:28:ae:98:6b:3a:22:7a:a8:dc:41:ba:cc:80:
1f:8f:26:a9:80:fa:b5:40:36:04:98:96:1d:c4:38:62:85:ec:
e4:97:53:05:c3:b0:a1:3d:3e:de:5f:b2:34:0a:5c:ca:23:ae:
bb:e7:4e:4e:d4:d5:08:b7:26:c1:0a:ed:b5:aa:57:37:7e:c2:
24:0d:4b:94:4c:e7:f2:d2:e6:e1:b7:07:74:7a:2e:c6:c5:88:
51:fb:25:40:9a:75:58:2c:3a:db:c9:cc:f8:de:e9:e1:30:6f:
6d:11:3d:d7:3c:02:d3:0f:57:09:71:5f:18:30:17:5c:ca:6e:
21:e9:04:ca:7e:19:47:a8:fb:41:4d:da:31:11:0a:2c:e4:63:
eb:18:28:72:41:ad:7e:f0:7a:fb:e3:59:2f:fd:56:17:b0:66:
15:70:33:68:0d:5f:cf:fa:1b:64:4c:e0:07:ab:25:7d:36:d9:
7e:1d:ee:4e:93:1b:ec:62:fd:30:f4:b3:70:e5:a8:42:45:df:
b5:72:f1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:27:50 2025 by rpki-client