Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pMqKz4g4TsU94Z4om10mQqEf9_0.cer
File: pMqKz4g4TsU94Z4om10mQqEf9_0.cer (raw, json)
Hash identifier: M7c+D0t36RUAhemU+A5iPF2f6nVxenWUA6Ba/rfrHLM=
Subject key identifier: A4:CA:8A:CF:88:38:4E:C5:3D:E1:9E:28:9B:5D:26:42:A1:1F:F7:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427482093010F09D79463948AC433ECA7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42944
AS: 47572
IP: 77.75.136.0/21
IP: 185.210.104.0/22
IP: 193.201.204.0/23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:20:93:01:0f:09:d7:94:63:94:8a:c4:33:ec:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4ca8acf88384ec53de19e289b5d2642a11ff7fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:99:fc:92:6d:3a:3b:37:5c:e4:3e:b9:31:f2:
53:04:74:3c:83:6b:3c:6f:76:36:ec:21:b3:b2:0f:
bb:85:64:61:d7:7e:7e:43:03:4c:83:e8:e5:54:49:
b3:b6:4d:b5:f2:60:62:8f:9c:fb:67:a5:ac:5d:70:
da:37:f0:44:9b:22:b2:f4:2b:a3:d9:2b:2a:48:e2:
fb:5e:03:36:d4:e3:d2:83:d9:f9:eb:9e:0d:f8:d0:
71:34:6a:a3:32:a8:dc:4f:f0:54:e1:b7:db:fa:32:
b5:25:3f:1c:58:f6:dc:96:8a:be:10:51:77:9b:b0:
21:31:31:35:00:9c:a4:e5:2c:9b:bb:89:c3:a2:c2:
62:03:84:8f:3d:b6:d9:54:8c:3c:a1:64:bd:58:c1:
ed:36:12:ed:5a:04:80:30:58:3d:07:ec:11:bc:a3:
63:c6:92:be:6c:fe:29:56:6f:69:35:03:6e:30:d1:
09:93:4e:d5:78:2e:43:a3:a1:c4:5d:a1:74:ac:b6:
2f:35:1c:b7:80:d5:8e:91:dc:be:d7:28:0e:6a:5e:
1e:87:e9:72:cf:69:93:59:ae:34:34:7d:d9:5e:a6:
ce:ef:90:29:b5:77:4a:61:5b:ec:5b:5f:2f:04:3b:
22:76:05:14:73:df:88:83:f3:5e:74:0a:bc:a7:05:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CA:8A:CF:88:38:4E:C5:3D:E1:9E:28:9B:5D:26:42:A1:1F:F7:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c4c872-f46e-433d-9785-ecd7fbc87580/1/pMqKz4g4TsU94Z4om10mQqEf9_0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.75.136.0/21
185.210.104.0/22
193.201.204.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42944
47572
Signature Algorithm: sha256WithRSAEncryption
a1:7b:7e:21:2e:02:07:dd:17:42:38:c0:2f:7a:8c:c5:c3:be:
ac:66:dd:f6:96:00:f2:c1:f3:9c:f0:ec:a6:6d:ff:0f:22:e4:
59:39:07:b7:c1:a2:a0:db:be:8a:d3:41:92:31:07:a0:e5:4f:
44:3b:01:0a:32:0c:80:20:4d:a0:e5:f5:eb:d1:03:cb:d2:6b:
ed:9b:cf:e8:a2:f8:7b:3e:90:26:30:f1:90:89:0b:2b:d3:4c:
94:96:da:a6:5a:a9:6a:88:e6:83:87:05:1f:36:70:89:23:c8:
8a:bb:70:a5:51:3d:c6:d4:03:9a:5d:54:79:0d:75:15:d2:38:
d2:a5:4d:81:25:37:c6:ba:a8:77:d5:6a:e2:eb:8a:5f:3e:5f:
80:1d:50:b7:ea:fb:db:d6:a2:93:55:7f:59:13:e9:ba:aa:cb:
fa:1c:26:f1:c3:fc:55:d6:b1:27:49:6e:c9:6b:82:88:c3:4a:
6d:fe:4e:21:9b:e2:b6:54:a3:77:95:36:6e:fe:6c:44:c5:5a:
cb:06:ce:30:0d:29:0f:ed:4b:11:7f:0d:c7:93:a6:7b:86:09:
e5:9f:a3:88:0e:5a:4a:43:51:84:78:2a:47:e0:4a:c0:fd:f4:
6d:0e:de:f4:48:7b:0a:e6:13:4d:f2:64:e6:fe:6d:cc:5e:42:
db:7d:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:58:18 2025 by rpki-client