Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer
File: mKUzMIdAu70he_adzpCz9UEghFc.cer (raw, json)
Hash identifier: wurxMcKDjo98V3bYizLmcGKF8vEYb0rlJ6zWmGB8hs0=
Subject key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D738BB0368778E5580F0A2AAF3C76C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51557
IP: 93.89.224.0/20
IP: 185.33.232.0/22
IP: 185.111.232.0/22
IP: 2a00:e5c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:38:bb:03:68:77:8e:55:80:f0:a2:aa:f3:c7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=98a533308740bbbd217bf69dce90b3f541208457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:46:8d:bd:64:c2:34:5f:83:14:7e:eb:44:0f:
d6:f0:db:6d:bd:e9:15:dc:0e:86:b6:8c:a4:dc:2e:
94:27:b4:01:30:69:13:26:4f:1d:33:06:24:ce:9b:
e3:61:8c:64:6f:aa:47:8e:25:0f:d0:cc:58:72:a1:
24:0c:d8:1b:d1:67:d5:41:d7:84:31:9e:f3:82:85:
db:1f:b2:06:84:89:8e:6b:6a:34:57:a2:f2:5e:e0:
5a:ac:00:31:e8:a7:61:c7:d5:61:fc:79:e9:62:94:
37:a3:0c:ce:d1:fd:87:06:27:9c:98:4f:46:00:ed:
9b:55:37:aa:c9:9f:dc:86:62:c5:01:85:dd:7d:13:
88:f2:63:b2:71:84:f3:44:e8:b1:ae:b1:0b:0d:a8:
70:93:62:79:98:ee:98:0e:25:9d:5e:0e:7c:36:d5:
d2:6a:f8:6b:93:54:90:77:64:d7:be:22:d4:bd:96:
7b:c8:79:68:1d:92:37:23:a3:a8:5c:0e:aa:57:a6:
58:9e:b4:06:22:39:1a:20:f7:ab:73:1c:30:ac:4b:
a2:c3:7d:cd:e2:39:dc:6b:38:2d:62:b5:f5:b5:59:
43:b7:36:5f:4f:e8:be:23:f8:da:0a:02:d5:cf:ce:
2b:87:8e:9c:25:fc:05:20:07:9f:23:50:c8:11:30:
68:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.89.224.0/20
185.33.232.0/22
185.111.232.0/22
IPv6:
2a00:e5c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51557
Signature Algorithm: sha256WithRSAEncryption
7c:c8:4c:cb:ba:38:50:af:a2:81:ba:33:44:57:02:2b:ea:5c:
0f:61:1d:69:53:8c:5a:e0:1f:22:5a:2a:89:e0:42:d9:46:95:
47:7c:f6:f4:fe:45:d5:c3:54:ba:8d:4f:a4:bb:35:d7:e6:88:
b7:bb:11:59:1d:4e:27:22:07:84:77:e0:21:a6:15:9c:68:d2:
23:30:10:59:43:1d:9b:81:fe:56:51:3a:02:5a:f0:df:8e:c0:
bd:bb:a8:71:80:01:76:fe:fe:f1:c8:94:2f:7c:70:b7:95:3c:
ee:e4:9d:66:7c:54:39:89:60:dd:14:0c:6e:0e:f8:d0:5a:77:
0c:ca:c4:5b:6e:1f:81:01:50:60:df:c1:8d:3d:bf:80:8e:6e:
8d:b7:aa:4d:79:50:4a:e7:6d:e6:e3:82:b9:0b:f1:fd:df:92:
3e:09:cf:10:ac:ac:e0:83:25:00:22:c9:90:fc:b3:e4:25:41:
b8:8e:24:16:06:b1:da:d9:eb:30:04:ec:1d:c5:2d:e4:72:9a:
6f:54:e9:28:ec:c9:45:c9:ae:f9:aa:7c:b4:25:3c:17:12:9a:
60:41:16:fa:8c:5f:0b:7e:7c:f3:40:a1:0d:57:de:07:ab:e4:
31:46:d8:1b:99:e1:ee:a9:ea:c7:d4:4b:eb:68:44:a8:b8:93:
17:ca:09:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:43 2025 by rpki-client