Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
File: mJAcfP_Rmk_qePebEASZkmbcwiQ.cer (raw, json)
Hash identifier: Y9wfSJygEe/n3A4/qSAIgULEe+Cnkn3rngU7CMN5s5g=
Subject key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BC4E40763CDDD166FD3C9188E6BAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.210.232.0/22
IP: 185.43.232.0/22
IP: 193.36.43.0/24
IP: 2a01:6ce0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c4:e4:07:63:cd:dd:16:6f:d3:c9:18:8e:6b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98901c7cffd19a4fea78f79b1004999266dcc224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:5f:9d:ed:9e:54:b7:d3:57:2c:10:07:a7:
d1:7a:e8:1f:34:6c:58:29:03:e0:c6:6f:50:bc:24:
86:f3:23:de:b3:8d:f0:72:57:ae:d2:a0:a0:86:bd:
9a:1d:b7:75:bc:f6:1b:8f:93:9b:51:f2:f5:36:50:
f9:68:1c:28:8c:df:b3:24:0c:d3:3b:6f:0b:d2:fc:
7f:58:d4:3e:18:fc:d5:02:e4:f1:2b:b8:61:bb:95:
8b:76:7c:a2:fe:6b:1e:8d:d3:0f:14:27:35:9d:fb:
e0:73:da:21:91:ea:47:be:43:4d:54:80:09:24:73:
ab:cc:23:e6:50:d3:30:bf:8d:a2:64:66:1e:ba:bd:
d1:77:f2:7b:44:10:6a:aa:40:47:52:e8:a1:a4:10:
96:65:f5:de:c3:28:3e:69:53:47:b7:29:bd:89:a0:
30:bf:1f:7e:33:9a:79:f8:d9:c2:23:7e:e0:07:17:
30:46:8d:fd:7f:fb:3c:cf:f8:f9:f7:6e:c5:1c:f8:
97:8f:35:7e:d7:83:16:16:1f:40:e8:fa:4b:f2:35:
7f:a4:8d:fe:1e:52:f3:b7:e1:19:62:81:4e:40:6a:
74:47:d0:1d:8d:b0:b9:2e:60:20:b0:94:0f:0f:da:
8a:74:40:13:70:69:24:82:fd:15:12:06:0e:0b:8b:
de:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.232.0/22
185.43.232.0/22
193.36.43.0/24
IPv6:
2a01:6ce0::/32
Signature Algorithm: sha256WithRSAEncryption
0b:dc:95:c9:14:a7:84:a0:14:bc:ec:f1:3e:48:a7:1e:2d:c4:
22:4f:0f:98:8a:82:75:a2:b7:0c:09:c0:9c:68:80:48:6a:81:
87:49:63:19:a7:75:29:aa:ab:1b:e5:0f:26:1f:36:9e:3e:63:
84:df:f3:28:25:25:c3:d0:d5:c9:30:3c:2b:d5:60:ae:07:69:
86:2c:bd:5d:ba:39:9e:83:8c:92:2b:37:3f:29:0b:e1:e6:ac:
5c:37:47:80:59:a2:4d:4e:bf:14:b8:03:36:c6:a1:3e:88:01:
54:9d:9b:05:ba:12:9f:27:88:85:5d:72:32:a6:02:ba:bd:d4:
b1:84:8a:81:60:fb:7e:f6:c4:6b:33:b7:a3:d2:98:b6:a2:1d:
79:ae:5b:3e:7d:d9:65:c5:2d:c9:83:7f:01:17:23:f3:38:42:
ee:49:80:bc:cb:45:fb:f8:c3:b4:a9:99:c5:04:9b:83:c6:29:
d2:ef:9e:dd:af:ac:f7:d4:72:dc:f7:7a:ac:9a:e0:5d:52:d3:
d7:67:fd:cf:c7:85:ee:de:85:0c:cc:40:0d:3c:38:e9:4b:50:
1e:22:23:ac:f6:b5:7b:88:62:8c:e8:06:e5:a8:83:4c:b7:68:
96:b3:97:a3:56:e5:1a:09:ad:fd:9e:f8:07:7c:35:19:77:e0:
45:e3:dd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:10:28 2025 by rpki-client