Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.cer
File: mcE8tY0v0x4SxeFGzGtPLHR4FvQ.cer (raw, json)
Hash identifier: uCOjBaxs5zO1IGvJg1T/utJdV+JkvB9tD5ty5VxDTvQ=
Subject key identifier: 99:C1:3C:B5:8D:2F:D3:1E:12:C5:E1:46:CC:6B:4F:2C:74:78:16:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427480D9E3E8FEE18D42A94F7C808584E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48218
IP: 45.141.96.0/22
IP: 46.235.144.0/21
IP: 77.72.176.0/21
IP: 2a00:d08::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0d:9e:3e:8f:ee:18:d4:2a:94:f7:c8:08:58:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=99c13cb58d2fd31e12c5e146cc6b4f2c747816f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:33:70:ac:03:e1:10:ad:a5:4b:b6:24:89:d8:
ac:22:6b:d9:bf:e9:76:31:19:14:bd:6c:1b:58:6b:
40:58:ab:d4:63:fa:0a:20:84:f3:d8:12:cf:c9:a0:
92:f5:d4:3c:df:94:7a:24:bd:af:06:97:80:c2:8b:
e8:00:bc:cb:38:d7:c7:12:d6:a1:a6:6f:ab:68:5f:
c7:2e:94:29:78:c7:56:46:db:71:3f:e0:76:24:87:
88:ea:9d:99:7b:54:de:2e:80:4d:1b:db:97:da:d3:
85:e3:e8:01:5d:86:1d:b0:a9:67:9c:be:e4:5b:ab:
37:f9:6e:08:ff:91:fa:74:88:7f:f8:5a:d5:e9:51:
65:df:b6:ca:f4:3f:1d:0f:ee:a7:a8:90:51:d7:6f:
bb:8a:7c:20:6e:d6:31:8a:e6:72:f6:1b:44:09:8b:
64:b7:7f:d8:f2:14:d7:8b:42:56:d3:65:57:08:a3:
85:65:02:42:5b:ea:06:0c:20:49:0c:d0:42:fe:b5:
b0:ca:2b:e3:77:b6:30:70:40:89:bc:24:e4:bd:d6:
ee:b1:e9:9e:11:9d:07:0b:a4:3b:81:ce:5b:01:29:
cc:20:88:ef:fb:a8:07:6b:ad:28:5e:9b:16:51:8d:
e8:3d:a9:5f:33:48:05:c3:a3:0e:c0:e2:2a:b8:2e:
3a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C1:3C:B5:8D:2F:D3:1E:12:C5:E1:46:CC:6B:4F:2C:74:78:16:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b92b30-8ada-475c-aa2a-567dc9a79fdd/1/mcE8tY0v0x4SxeFGzGtPLHR4FvQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.96.0/22
46.235.144.0/21
77.72.176.0/21
IPv6:
2a00:d08::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48218
Signature Algorithm: sha256WithRSAEncryption
3e:d2:66:3c:2d:94:cf:97:2b:57:50:e3:61:22:7f:9d:8b:6f:
7f:a5:f3:94:f4:42:e4:36:39:0f:99:8b:96:f7:87:3f:ab:b4:
4d:22:33:dc:84:d1:5b:03:32:76:0c:78:28:cf:da:c9:2d:e4:
2c:86:f5:d0:d7:aa:2f:f6:9f:bc:12:bf:c4:4e:7c:14:01:a2:
7d:c8:62:ea:74:72:82:cc:fc:08:21:a9:94:ca:a4:0d:9c:c2:
20:9d:f5:e8:54:c9:1b:a1:8a:f8:7c:f1:a7:c8:64:5b:8c:a3:
dd:cc:d1:e2:36:86:50:84:b2:b9:49:73:55:2b:b6:86:9c:13:
c8:53:f3:68:28:fc:b7:4b:d4:12:11:10:54:4d:e3:a3:94:ec:
62:49:6c:67:ae:2b:f0:d8:9e:0e:c9:15:3b:15:56:ee:17:47:
6c:8e:94:bd:f3:78:5a:25:76:f0:67:53:b4:25:59:6e:a6:0c:
a4:75:77:6d:94:f1:d2:fe:1b:c0:06:50:7d:0b:92:9d:f2:83:
68:8f:77:4b:dc:98:84:f1:00:3d:07:d7:90:01:a5:c5:0b:d1:
a4:ec:dd:19:f0:8f:d1:83:cc:bd:a1:c9:29:ad:d7:36:fa:b6:
47:fc:14:15:fa:3d:30:6a:74:1b:d8:07:43:44:ec:91:69:94:
d8:7b:79:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:24 2025 by rpki-client