Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mWpflIQ1rLESpm4lY3kiY-yLZX4.cer
File: mWpflIQ1rLESpm4lY3kiY-yLZX4.cer (raw, json)
Hash identifier: 7F6FYSDkNfowcgRx3JUND8SBRjzrNcIQs4xZ/N4LfBk=
Subject key identifier: 99:6A:5F:94:84:35:AC:B1:12:A6:6E:25:63:79:22:63:EC:8B:65:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C39A976028C4C1BD2F829BEEF803C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203616
IP: 185.129.80.0/22
IP: 2a06:d400::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:39:a9:76:02:8c:4c:1b:d2:f8:29:be:ef:80:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=996a5f948435acb112a66e2563792263ec8b657e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:70:29:c0:57:9a:34:24:2d:a7:35:b4:33:
59:b0:b5:bc:a3:c0:56:5f:63:a0:32:70:ab:93:fd:
d6:64:ec:62:de:9c:0f:1b:d6:c7:08:9d:e4:15:e2:
4b:06:8c:93:37:52:80:fc:93:a2:4c:2a:ce:3f:ae:
13:59:0a:b2:e4:5d:db:1d:4f:5b:e4:1f:07:d7:c1:
99:b5:c5:12:17:6b:1d:69:c1:29:4d:49:ac:b1:c0:
23:ad:6a:05:16:7d:78:7c:02:8d:60:d3:11:9f:9b:
6b:ac:60:96:79:2a:c6:12:60:e3:93:59:5d:d1:93:
75:b1:1a:1d:62:f0:97:06:04:d8:64:a6:a5:94:f2:
79:36:01:fc:b3:05:40:bc:ff:0f:92:c6:f3:af:03:
b9:3c:aa:69:5d:3c:16:6c:25:03:71:03:73:5c:ab:
ed:97:cf:ff:30:c0:a1:28:0d:13:ae:04:fc:90:db:
45:64:d4:63:67:71:68:2a:c8:63:f4:b7:f9:ef:ae:
25:4e:75:ce:ef:80:72:df:71:33:3a:03:d4:52:43:
8d:8e:f5:af:bb:4a:32:60:13:9c:4a:0a:16:e0:82:
1d:31:28:95:75:d7:5e:7c:8a:61:8a:08:ed:7b:15:
77:c0:04:70:4c:9c:95:78:2d:e7:d9:d5:29:26:cd:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6A:5F:94:84:35:AC:B1:12:A6:6E:25:63:79:22:63:EC:8B:65:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/eb0fea-b0db-4886-ba0d-67c796aa97e9/1/mWpflIQ1rLESpm4lY3kiY-yLZX4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.80.0/22
IPv6:
2a06:d400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203616
Signature Algorithm: sha256WithRSAEncryption
01:9c:d0:37:b0:04:e5:e8:07:c0:72:a5:91:c7:13:62:6c:0a:
fd:2b:86:1e:f6:ac:07:5a:8e:05:17:5c:0c:9d:16:c6:94:93:
6a:3e:6a:4e:21:b9:24:a5:30:fe:6c:14:96:29:b5:4d:68:cb:
d4:62:fc:c3:a1:71:85:34:a9:b9:95:a2:e4:3f:6c:b3:84:0c:
2f:b3:cb:c0:94:ac:bb:19:eb:8b:6f:3e:2a:53:03:e0:02:aa:
10:24:ca:5c:39:b0:c1:5a:f9:e0:39:d0:69:19:95:08:77:39:
05:48:4d:81:7d:a5:ed:59:b9:05:52:a8:cf:2c:c4:3d:d7:e6:
69:dd:e6:af:a1:df:eb:ef:a8:00:13:21:1b:6d:ff:47:04:cd:
e1:cf:9d:97:36:30:65:cb:2b:81:19:0b:c8:5f:03:4a:f0:f5:
bb:4b:5d:e8:e9:ee:12:72:9f:0b:af:74:65:66:2c:f4:20:3e:
c7:0c:1f:d5:a1:dc:7a:9c:11:f7:fb:d9:48:31:27:b0:a9:8b:
c6:a3:25:4d:23:25:3d:c8:7f:56:22:d0:b3:79:dd:6e:47:82:
9b:c9:c1:ac:a5:bf:56:e2:f4:40:59:6c:ea:51:50:25:6e:be:
5c:1c:4b:75:f8:d6:5b:f4:96:ce:83:dd:1f:65:56:46:95:38:
93:00:57:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:41:14 2025 by rpki-client