Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MTZAKhRELms6FTnWQlASjc3R7Ns.cer
File: MTZAKhRELms6FTnWQlASjc3R7Ns.cer (raw, json)
Hash identifier: IHL/AM4fS+V/cdvrSBr1fagHEFGEVERfEN3DbZ9Mu+k=
Subject key identifier: 31:36:40:2A:14:44:2E:6B:3A:15:39:D6:42:50:12:8D:CD:D1:EC:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019546FF666644054B4D2440F064D2C440EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 27 Feb 2025 10:41:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.136.134.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:ff:66:66:44:05:4b:4d:24:40:f0:64:d2:c4:40:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 27 10:41:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3136402a14442e6b3a1539d64250128dcdd1ecdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5e:e1:e6:bf:9c:0d:11:0b:f1:54:9a:36:81:
e4:16:27:f7:52:d7:5a:95:97:91:1c:57:4e:91:42:
ed:59:eb:2a:a3:3c:ba:3f:ef:fe:d2:f5:00:97:3a:
ab:4e:d2:b8:72:ff:16:c4:6d:47:a7:b4:2b:52:80:
d8:5a:1a:65:b9:34:91:0a:e1:91:77:18:b1:e3:69:
f4:8d:f5:cb:20:13:91:f0:cb:00:c2:a9:e1:a7:0a:
e5:86:f2:ce:e4:1b:18:30:cd:5b:23:fb:05:70:bd:
67:5d:09:ec:bf:e1:5e:ac:ca:13:69:40:e7:7f:1c:
10:90:50:50:6f:53:e9:69:dc:ff:7b:67:be:f2:f5:
34:de:58:aa:8f:ce:1a:ea:2b:c6:e9:d2:bb:ec:04:
e7:13:df:08:09:39:37:1b:69:c2:58:0e:78:2a:3c:
43:43:a0:0b:00:9d:e4:20:a7:ec:cb:3d:5d:bc:90:
54:2b:f1:d8:0f:4f:fc:b9:f4:08:0d:c0:0f:ae:6c:
03:93:5b:47:af:cd:2e:7c:f1:db:37:6e:f1:33:98:
e4:e4:25:94:d8:ee:f7:38:32:9b:14:2a:97:a0:a2:
cc:0b:d5:07:b1:ac:ab:56:c1:e6:ba:82:3c:1d:56:
12:24:71:af:20:3a:f7:59:b6:79:6a:a8:31:36:e0:
dd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:36:40:2A:14:44:2E:6B:3A:15:39:D6:42:50:12:8D:CD:D1:EC:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b009cf-59ca-43bc-bd51-c0a424e65973/1/MTZAKhRELms6FTnWQlASjc3R7Ns.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:aa:c0:9b:71:84:35:25:55:e1:12:3c:86:1e:45:09:0a:e1:
d8:50:ee:02:6b:e0:7e:c7:ba:a7:37:94:d8:99:c1:4e:b2:cc:
9e:1e:1e:e1:b2:15:f5:45:df:31:0b:ae:ed:86:eb:ba:17:35:
f6:f4:97:62:a2:42:b1:5d:ef:de:61:a5:8d:e7:00:28:8d:5b:
32:a7:c3:76:98:20:da:38:be:24:bf:d0:7f:d1:9e:6c:64:ba:
b7:e3:af:31:13:0e:e0:28:29:72:39:b2:a7:ad:8c:8d:62:2c:
ce:97:29:8e:79:18:a6:d6:02:72:e4:34:97:a9:08:ba:b6:23:
89:51:d0:ee:44:82:3d:ae:ff:d7:0b:5d:51:6d:3f:58:03:23:
b0:6e:ce:e7:d0:e6:35:8e:3e:6d:30:2d:94:25:3a:55:81:d1:
3d:7a:dd:71:53:48:38:48:42:e0:69:5f:6a:15:2c:42:09:4f:
26:86:59:32:fb:d2:78:ca:51:ac:9e:94:ad:65:85:db:23:c2:
37:41:ba:1a:d4:50:a3:e4:03:d4:47:40:36:d7:3b:61:52:f1:
ec:44:8a:fa:32:89:d0:f0:70:46:e5:15:08:16:d2:e2:8a:4d:
9e:dc:a5:27:8f:e1:2b:ee:d7:1e:b7:4f:4a:51:e2:01:09:c9:
a9:7b:a5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:33:05 2025 by rpki-client