Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
File: rMSPelkSBYjUFw6igV5q5RvmvP8.cer (raw, json)
Hash identifier: 4MnSmeIwm9FKSTa5G79ygMKH33BPOr3ctKFMsnD3qDU=
Subject key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C11381EF5CF3D794E897765ED9A4D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206720
IP: 185.187.244.0/22
IP: 193.56.32.0 -- 193.56.40.255
IP: 193.56.42.0 -- 193.56.45.255
IP: 193.57.48.0/24
IP: 194.5.55.0/24
IP: 2a00:6fc0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:11:38:1e:f5:cf:3d:79:4e:89:77:65:ed:9a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:37:82:be:af:c1:0d:28:2c:a5:5e:ef:dd:79:
cf:4c:d0:cc:7e:17:25:34:a6:2b:f5:ca:57:4b:b2:
a4:2f:54:5f:4e:bb:98:19:ee:d2:0d:42:1f:3d:47:
93:1f:74:be:24:6a:4f:c7:fc:d1:19:fc:d5:b4:03:
fe:5f:d1:c6:c5:5f:ce:2a:af:b5:ed:ea:42:55:7e:
23:d5:27:10:98:d8:6f:0f:10:8b:3d:3c:f3:e6:f3:
ae:ae:72:84:b1:a5:c4:b5:0a:b6:2d:b4:39:75:23:
21:1e:03:62:0a:9a:59:99:bd:2f:19:20:a1:c5:b1:
df:70:5b:68:d5:0f:6c:f5:96:1c:5d:96:e5:a9:e7:
ce:c6:b3:1e:73:d4:98:8a:86:b0:8e:3e:cc:92:52:
0f:cb:b9:98:1b:ab:4c:45:18:f0:7d:ab:24:ac:2e:
07:d5:1d:8b:9d:fd:ce:a2:e2:82:0d:91:f7:f5:3a:
ca:2c:6f:30:25:0d:c0:36:75:a8:91:46:dd:52:5a:
f9:40:2e:09:91:f3:d7:0e:38:34:b4:f7:17:8b:1b:
0a:20:90:62:c2:9f:fc:37:b7:99:23:49:8e:d5:dc:
f1:e0:4c:6d:76:28:ed:33:3d:8d:21:7b:8a:a9:18:
61:ec:89:b1:1c:e6:58:7a:66:84:e7:b1:d2:ad:02:
e3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.244.0/22
193.56.32.0-193.56.40.255
193.56.42.0-193.56.45.255
193.57.48.0/24
194.5.55.0/24
IPv6:
2a00:6fc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206720
Signature Algorithm: sha256WithRSAEncryption
42:37:1e:fd:29:fb:52:56:e4:3a:b8:ab:f6:c4:11:38:78:4b:
fd:47:58:08:d2:ef:b1:f1:87:79:a5:80:a5:33:f2:19:8a:f9:
78:29:d6:b1:02:66:dc:f6:a2:66:2c:e2:e3:75:4f:a6:39:fc:
cc:ee:79:30:e6:b3:4f:86:9c:0c:6a:2b:55:f9:89:ac:d0:19:
a2:a5:eb:84:73:3c:57:d7:9b:1c:25:cb:f1:d0:32:a7:49:20:
60:1b:df:98:ab:d4:b3:fa:a4:eb:ca:9f:8e:65:af:2e:80:6d:
41:a5:07:21:3a:2d:42:28:1f:5d:66:83:51:9a:91:83:3d:cc:
4a:99:90:9a:1e:7a:03:bf:70:51:d1:d8:76:5e:e3:91:a6:af:
2e:5e:62:d3:dd:da:18:aa:3f:11:7d:b0:dd:25:36:18:a2:f3:
76:7a:67:ae:dd:79:11:2e:2c:0b:37:0c:85:e3:01:3c:0b:a7:
39:2b:d4:5e:a9:5d:06:46:7e:43:58:1f:52:8c:53:37:bc:7f:
9c:16:7d:4a:0a:fd:b0:26:4d:22:b3:95:50:50:b3:e3:c1:e8:
2b:f9:d0:08:c0:db:99:2f:c9:98:d3:32:24:09:f0:43:9c:96:
f7:be:40:2c:ce:ba:a1:85:f8:40:a6:a8:37:b3:93:b6:ad:6a:
bb:ec:f9:67
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:25:25 2025 by rpki-client