Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
File: mRLZRawqSfO02iIhwnuCmq_MsvI.cer (raw, json)
Hash identifier: EYnGNzP/5qSjGrZDTDojA1IXiWcUmB+TUqXn/9o1slw=
Subject key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274666E54ADC92F4E0AB213551437712
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.177.100.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:66:e5:4a:dc:92:f4:e0:ab:21:35:51:43:77:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:e7:56:e4:c0:ec:72:e6:cd:5a:cf:a7:c6:
8f:36:cf:2b:5f:cb:a6:41:dd:11:2a:8d:e5:ff:41:
96:cd:8a:78:88:0f:f4:6f:38:af:c9:35:0c:dd:40:
75:7c:62:7c:00:85:9c:da:c7:96:f4:72:3a:9d:c8:
b1:a6:e7:c7:c3:8c:96:12:63:d4:68:ac:36:85:c8:
88:1d:11:a9:59:3b:00:b2:d0:39:a2:eb:26:eb:aa:
cb:af:40:90:9f:b8:29:a8:43:c2:a1:23:01:ec:d7:
02:59:e8:85:6a:59:81:67:64:e7:02:a8:98:36:b0:
0c:14:2d:e9:a0:30:94:22:45:80:2a:8a:6c:03:98:
78:d8:45:71:69:41:f2:ff:89:c8:94:6a:91:66:c9:
dc:bd:7c:be:04:dd:6c:41:1c:4a:c7:ab:c2:50:9d:
09:3c:1b:ee:ac:ec:28:32:c6:49:00:c1:0d:5b:e8:
9c:8b:d7:9c:f9:82:b4:7e:a7:36:70:6a:b2:dd:e3:
29:06:cc:53:58:53:03:b4:1d:f4:d1:49:60:19:f8:
1f:5e:95:cf:81:f4:f9:42:b9:e5:9c:69:78:3e:b4:
1e:60:67:11:57:4a:92:9f:01:9b:46:fc:09:f1:30:
ef:56:f4:45:59:25:ce:72:6f:98:3d:96:ff:58:7d:
dd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.100.0/22
Signature Algorithm: sha256WithRSAEncryption
82:df:fb:ab:0b:5d:29:5b:cd:dd:65:63:70:42:36:a7:d7:1f:
84:d2:be:78:6b:4b:de:50:26:cb:7f:43:0d:cc:02:c7:23:34:
c1:7d:02:4f:65:05:fa:8e:db:d1:e1:2e:10:88:ff:01:b1:91:
04:f5:23:69:c5:e4:2f:7d:9c:3a:1c:59:3e:c1:e6:f9:8b:69:
fa:25:76:32:1e:29:a6:f8:89:f0:89:cb:65:0a:4d:16:fc:28:
90:8a:ef:4d:25:86:b4:f1:6a:ca:ac:96:ac:eb:f4:e2:58:dc:
6c:8d:9c:a9:58:23:2f:8f:e9:ac:10:5a:99:2e:ba:c2:ca:8f:
22:ce:6a:69:5e:84:f2:01:00:33:15:27:f0:fe:e7:da:ba:04:
01:74:79:cf:94:5e:3c:d5:dc:4e:62:33:59:40:74:75:cb:58:
1c:47:7c:cc:52:af:1c:67:18:3b:33:2e:26:df:69:e7:ab:0d:
08:b9:38:30:d3:82:4f:06:b3:15:5b:04:18:ac:55:b1:64:63:
5e:be:0e:25:e7:55:04:5f:ff:1b:7b:d1:37:53:13:39:17:1e:
53:84:be:96:41:0f:fe:5d:1b:e6:04:9a:82:20:4b:ff:c7:71:
0e:52:9e:f5:84:8d:91:43:c1:37:86:8a:43:81:6a:cf:76:84:
ae:db:b4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:50:14 2025 by rpki-client