Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer
File: m-FvmcTjXzrt2Bs3k53ow8TpHBw.cer (raw, json)
Hash identifier: 2dkGNMOxxnivVBEuIiPeyCGNh9mTqdyNkCpfu7bScTw=
Subject key identifier: 9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3B8C7A013ED6A45B28226F6406AC0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29260
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b8:c7:a0:13:ed:6a:45:b2:82:26:f6:40:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9be16f99c4e35f3aedd81b37939de8c3c4e91c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:47:b8:6d:ef:09:e6:d2:12:b7:08:b6:7f:
55:f1:44:db:30:5b:86:76:c6:f1:5e:4c:77:b7:7a:
97:3a:1e:fe:57:91:18:de:96:f9:af:37:0c:04:de:
3a:b8:dd:2d:7d:e3:10:18:a4:d1:97:58:e1:d5:6a:
d3:ea:9a:a3:ee:9a:21:b1:bf:5d:33:61:dc:eb:03:
1f:b2:b4:c7:f9:57:d2:79:35:f6:f2:e1:d4:82:e8:
f2:5c:3e:2d:fa:59:6a:57:e6:ee:76:75:42:01:b9:
ea:4c:79:34:7b:22:2b:f6:60:1d:22:de:fa:61:f5:
86:be:48:84:37:6e:08:19:f3:7e:ce:30:47:22:e9:
d9:5b:40:6e:f3:27:0d:22:fc:cc:33:62:61:24:4a:
ad:56:b3:ac:cb:d0:bb:6c:70:46:04:75:13:cf:7f:
86:7a:ae:e7:01:1d:1a:4e:44:10:a6:23:04:32:e7:
c0:a3:0e:d6:48:ea:74:91:1c:c4:2f:62:88:1d:96:
e6:d6:c5:ca:7e:cf:a8:e1:2c:96:a4:b7:f6:bf:16:
6f:30:48:e3:68:ec:42:c4:13:d2:96:d1:52:5c:e6:
a8:2c:6f:b7:29:97:04:ed:cb:17:9a:dc:89:ce:39:
92:32:93:09:9a:7f:9c:9e:e2:58:8b:71:d2:12:38:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E1:6F:99:C4:E3:5F:3A:ED:D8:1B:37:93:9D:E8:C3:C4:E9:1C:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/6a053e-5c3f-437b-8977-1ba830a7cc5c/1/m-FvmcTjXzrt2Bs3k53ow8TpHBw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29260
Signature Algorithm: sha256WithRSAEncryption
3e:6b:21:f3:b2:d7:5c:7f:7b:d1:6e:66:9c:11:98:e4:06:00:
f8:41:04:0d:75:8f:7f:b8:18:ca:8d:12:c3:ac:dd:73:74:50:
d5:17:6e:a3:59:5a:e3:7a:94:e2:0b:9f:e6:6e:2c:c1:36:73:
24:f5:83:99:ca:6b:ac:b2:05:ae:c8:a7:e6:48:47:28:2f:27:
ce:b0:68:1d:43:87:d2:65:b5:cc:d5:25:c4:71:d3:93:64:6a:
6b:61:6d:a8:56:ce:27:d5:72:3f:1d:45:50:ad:0a:fd:01:bf:
a5:8e:ea:3e:42:ff:ec:a0:62:f8:b0:95:6c:ea:aa:c7:f3:49:
04:e8:e7:22:a6:f5:92:b2:7f:35:6e:40:7a:5d:b7:d6:cb:dd:
d0:eb:e5:98:ff:e9:22:e8:14:06:7c:12:6b:5b:30:3c:46:22:
9f:f8:bb:ff:fb:7c:ab:72:5e:75:1b:ed:64:ec:ca:83:3e:b1:
52:a4:fa:e0:4d:95:01:79:26:83:f4:12:61:99:6d:78:65:f9:
98:43:16:15:53:37:3e:5c:69:40:e7:49:6c:fd:0c:b0:10:33:
ad:5e:21:00:3c:ab:89:ea:d7:d2:9d:73:2a:cd:70:9e:80:d5:
bd:ec:39:f9:77:4c:e8:c2:c0:87:28:d8:8d:aa:23:bc:5d:e9:
85:8b:55:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 01:14:46 2025 by rpki-client