Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer
File: mTkA9m5wsv_9nAzpJgLy9FxlmWE.cer (raw, json)
Hash identifier: UFLUT/xTGyxopbt73ECYlx7rFZmxqpT65EnRuZUsuRU=
Subject key identifier: 99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C2030CDE022EF54F91B56B4456EBF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34718
AS: 39032
AS: 47452
IP: 62.209.128.0/19
IP: 80.80.208.0/20
IP: 87.237.232.0/21
IP: 89.236.192.0/18
IP: 94.141.64.0/19
IP: 185.6.40.0/22
IP: 185.248.44.0/22
IP: 194.55.92.0/22
IP: 217.30.160.0/20
IP: 2a02:f10::/32
IP: 2a03:540::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:20:30:cd:e0:22:ef:54:f9:1b:56:b4:45:6e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=993900f66e70b2fffd9c0ce92602f2f45c659961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2b:b1:13:e7:aa:ae:87:01:03:f4:70:4d:fe:
8b:7a:82:2d:8b:dd:81:cb:c0:ac:ca:98:60:93:36:
22:21:0e:99:f3:54:50:5a:ca:8a:8d:d3:cb:a9:c4:
08:26:2a:23:3b:4f:9f:d1:b3:5a:0e:e9:65:c7:53:
45:af:cf:b1:d6:a7:c0:e5:b4:d0:8b:0c:19:70:bc:
e7:cb:4c:cb:4e:b1:2e:33:b4:a4:df:37:c9:86:2d:
67:77:d5:24:bb:11:bf:18:12:cc:3e:98:b0:58:99:
8b:15:8c:6d:4e:97:89:43:88:77:73:24:f9:b8:6a:
a6:8a:2a:05:49:1c:3b:de:ba:f0:7b:ed:3e:9f:48:
e0:09:18:ed:20:df:23:1e:33:c0:c5:e9:fe:e5:b1:
3f:b0:ce:8f:14:17:6d:fc:e7:a6:5f:18:db:7c:2d:
86:e4:6f:ca:8e:83:c5:e2:41:b4:81:b2:0d:dc:4d:
6e:e7:a0:57:d9:5b:e6:96:cc:72:3c:9c:4a:52:6d:
76:8e:af:83:42:14:11:da:40:80:ba:6d:50:d4:c9:
a0:e7:dc:95:a3:64:c8:6f:41:a3:14:4f:6e:4e:f6:
57:a7:22:f3:e9:08:e8:07:fc:e9:07:49:92:00:b3:
bf:49:93:43:50:fe:6c:47:ff:90:ab:5e:a9:a4:b9:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:39:00:F6:6E:70:B2:FF:FD:9C:0C:E9:26:02:F2:F4:5C:65:99:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/c1cf6f-54cd-434a-837d-def6efb44319/1/mTkA9m5wsv_9nAzpJgLy9FxlmWE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.209.128.0/19
80.80.208.0/20
87.237.232.0/21
89.236.192.0/18
94.141.64.0/19
185.6.40.0/22
185.248.44.0/22
194.55.92.0/22
217.30.160.0/20
IPv6:
2a02:f10::/32
2a03:540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34718
39032
47452
Signature Algorithm: sha256WithRSAEncryption
5f:91:97:4c:19:10:17:64:f9:17:e8:e5:05:10:61:52:d9:f5:
f8:71:4a:b8:d6:57:6c:58:f2:e4:4f:ab:42:c6:3e:8e:2b:2a:
fa:7a:7b:27:ab:f5:c7:1f:3b:31:60:12:58:ae:7f:d8:82:68:
72:62:23:dc:f8:5b:be:ae:5e:b3:a9:97:4d:91:ef:6d:fe:8d:
07:ff:87:77:84:66:42:d1:eb:72:2d:e2:29:96:1e:92:67:66:
d7:2f:5d:f0:c1:8a:ee:e8:92:98:f2:d3:31:0f:18:cc:36:16:
1f:7a:a9:cb:c5:86:3f:08:59:87:f9:8f:08:25:40:cd:35:e5:
3a:f5:eb:48:d7:cf:67:1d:23:16:99:13:24:18:1b:76:8e:7b:
1a:cd:1d:9f:3e:65:f8:ae:48:01:71:f3:87:f3:4e:f3:0a:4d:
a7:a2:02:1d:50:99:5c:4a:3f:8e:33:05:0f:30:fe:f7:2f:4f:
f6:80:3e:bd:4c:1f:72:82:14:d8:22:96:aa:af:7d:65:59:dd:
d4:e1:c7:8a:57:69:ab:d3:ef:d7:c9:cd:7f:ec:b2:60:a2:7d:
c5:15:e5:de:14:da:03:a4:60:9c:87:32:3c:23:5d:86:fd:d4:
89:79:c8:06:7c:ab:1e:70:64:b8:1b:47:72:27:cf:72:3b:ed:
f1:72:eb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 04:05:20 2025 by rpki-client