Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer
File: MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.cer (raw, json)
Hash identifier: HsdWH8ysSbcWri9o9H/iHxNtttbllOqXbXuRNVKWoL0=
Subject key identifier: 31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194B736DF0C5F87D2C60C19DA5741A2553B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 30 Jan 2025 12:36:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204607
IP: 83.143.120.0/21
IP: 185.245.108.0/22
IP: 193.162.108.0 -- 193.162.113.255
IP: 2a0d:5680::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b7:36:df:0c:5f:87:d2:c6:0c:19:da:57:41:a2:55:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 30 12:36:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31d7d9d29cecf8e59122233d716e6b050e718478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:56:c3:51:e7:62:15:c0:ae:f3:49:97:76:
75:cc:8d:0f:3e:22:d3:25:e2:31:1d:c2:27:cd:0a:
66:f8:dc:31:57:dc:b4:2a:b1:64:74:12:c9:56:dc:
00:79:bc:c2:3a:8d:c2:93:d4:54:de:64:24:e0:f6:
e4:58:e4:72:47:0a:16:38:b6:d6:27:c5:8c:45:7d:
75:88:27:ed:a5:cf:2b:b8:5f:ce:04:12:4c:9e:e7:
cf:90:16:81:7d:21:b8:20:90:c8:07:15:ec:0c:87:
58:16:7f:56:a6:79:66:b3:fc:d9:5b:c4:43:b1:84:
b3:f3:f5:59:ee:3c:5a:63:d0:d5:43:88:86:f5:54:
ee:80:58:58:68:91:fe:db:3c:c4:cf:f7:96:8b:99:
75:be:64:aa:0b:9b:9e:ec:ed:c5:51:65:74:68:d0:
44:9f:6c:05:69:be:ca:e4:81:cf:1d:60:b4:5e:f3:
fa:97:92:43:28:5f:e8:ad:10:a7:dc:10:6e:14:8d:
cc:57:b4:d4:03:bb:18:f0:48:ad:83:73:2f:89:21:
33:6b:16:34:e4:c0:3a:77:bf:b8:65:12:f2:df:1f:
d8:e1:fd:da:89:f3:11:dc:d3:f4:a5:4c:89:b1:2c:
ad:27:c5:24:be:d5:48:14:ab:ed:f1:6b:da:e1:f6:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D7:D9:D2:9C:EC:F8:E5:91:22:23:3D:71:6E:6B:05:0E:71:84:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af832b-a641-4e46-a836-40f4c68e9a31/1/MdfZ0pzs-OWRIiM9cW5rBQ5xhHg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.120.0/21
185.245.108.0/22
193.162.108.0-193.162.113.255
IPv6:
2a0d:5680::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204607
Signature Algorithm: sha256WithRSAEncryption
9a:62:ae:70:d6:d7:94:d6:ef:f9:38:62:30:a7:ff:d5:c6:d3:
f6:a7:c7:40:33:99:4d:2b:36:fe:ba:c4:4c:6f:dd:eb:0f:d7:
b1:3b:d8:03:b9:c9:e4:bc:e5:eb:02:c9:92:ea:b6:ee:b1:f2:
31:88:92:03:9c:39:d2:26:24:ae:31:fe:68:13:ca:9e:41:c7:
c4:75:36:c5:3f:f1:c7:c2:89:c6:34:d1:45:5c:4d:73:dc:7f:
43:71:80:eb:05:93:7a:4b:12:32:2a:ae:d9:22:38:3c:b9:cd:
95:02:73:51:88:ef:7f:dc:cf:f3:fa:8c:db:0c:a6:4d:62:96:
71:7b:c5:05:b0:3f:fb:ed:df:51:44:da:c2:ea:03:08:8a:b7:
ec:d5:01:5f:6a:bf:5d:56:81:94:b4:d7:a4:92:76:e8:4c:07:
02:c9:90:27:b0:0d:6c:13:38:50:ff:46:2d:0d:44:cd:87:4f:
11:30:62:de:53:ba:64:2a:54:2b:11:13:fc:de:1d:84:8c:47:
fe:24:67:61:93:ea:29:d0:7f:b1:dc:e1:77:18:0f:30:c1:9e:
f8:45:27:08:c7:93:5f:17:cc:57:8a:03:40:ac:77:19:12:15:
8b:0f:6e:4f:4d:f8:78:a3:cf:f5:61:97:f5:f0:89:5f:3d:7b:
f3:f3:2a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:19 2025 by rpki-client