Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TClEOJMJIwmu7884VHplmAmh3i0.cer
File: TClEOJMJIwmu7884VHplmAmh3i0.cer (raw, json)
Hash identifier: netKJGmooNLByXV+cuQTEzoz6yzHh+N9psObwd9qWP8=
Subject key identifier: 4C:29:44:38:93:09:23:09:AE:EF:CF:38:54:7A:65:98:09:A1:DE:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197E47E70AE93867A04005FF7BE5A916844
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/3f7f5ea9-b067-4330-94b9-b6a3b735abd0/0/4C29443893092309AEEFCF38547A659809A1DE2D.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/3f7f5ea9-b067-4330-94b9-b6a3b735abd0/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Mon 07 Jul 2025 10:46:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211575
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:e4:7e:70:ae:93:86:7a:04:00:5f:f7:be:5a:91:68:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 7 10:46:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c29443893092309aeefcf38547a659809a1de2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b4:85:ed:f4:54:3b:12:ec:ef:2b:76:74:ba:
08:f6:ff:d8:59:cb:dc:35:14:74:51:92:11:20:59:
25:a1:4a:5a:53:50:45:04:72:99:cb:79:40:9e:22:
3a:57:8e:bb:98:12:f5:1a:aa:de:ed:ed:98:00:f9:
87:3a:3a:c5:b3:af:18:fc:96:a5:c4:3d:48:df:c3:
c0:a9:87:ff:c1:f0:42:c8:a9:5f:45:50:c0:7b:38:
cd:fa:ab:64:bf:8b:e8:5c:82:8e:4b:2f:36:9a:76:
67:f6:40:f9:85:d7:ff:3d:ca:7f:14:9d:cb:2d:20:
67:b8:17:4a:59:ba:c7:3f:2b:7b:9c:ec:c4:4c:a8:
68:a3:79:d4:26:75:ed:5c:e3:93:05:87:e4:5c:ff:
3a:21:31:f2:8b:5c:5e:1e:d6:5f:4c:d8:af:68:54:
e6:38:5b:89:b9:5d:04:b2:be:87:81:35:3c:f2:67:
dd:20:0c:ef:cf:33:6e:85:03:5a:cd:d0:bd:4a:15:
27:fb:c1:2f:d7:6c:11:99:5b:6c:15:09:f2:d1:9c:
fe:52:c2:84:d2:55:e2:01:7f:3c:51:56:7e:dd:3d:
8f:3f:79:32:17:26:e8:ce:2e:3c:ca:20:49:fc:3a:
33:cf:46:c1:2c:33:49:d7:e7:c3:bd:bf:59:05:45:
5d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:29:44:38:93:09:23:09:AE:EF:CF:38:54:7A:65:98:09:A1:DE:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f7f5ea9-b067-4330-94b9-b6a3b735abd0/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/3f7f5ea9-b067-4330-94b9-b6a3b735abd0/0/4C29443893092309AEEFCF38547A659809A1DE2D.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211575
Signature Algorithm: sha256WithRSAEncryption
4e:98:50:b5:7f:9d:57:58:f8:cc:91:e7:dc:a5:16:64:c2:f1:
d1:d0:a1:85:69:c8:8b:3c:a9:b7:8c:eb:f0:b3:57:43:c3:57:
0c:81:d1:16:33:2f:5d:51:72:a7:18:60:b9:ad:03:2e:f6:fd:
1b:e0:41:05:ca:1e:e7:d3:a3:98:73:69:74:3f:9e:e0:f8:9f:
b6:f0:0b:ca:69:11:10:9b:ed:d8:88:bc:75:40:3e:cd:40:d5:
8c:b4:b0:bc:d7:ef:b0:65:ce:c8:8e:ea:4a:06:c5:e2:23:61:
e3:93:42:b8:20:03:d4:31:2f:69:8e:04:fd:a4:c2:b9:22:17:
9d:23:0c:bf:f9:aa:3b:29:20:28:af:4f:00:67:20:17:cf:28:
b9:dc:23:b7:bd:e5:58:5f:e9:bf:9c:26:c6:1b:c9:23:91:d9:
6c:93:3a:9c:68:e2:47:35:c7:08:ca:78:d8:9d:96:19:aa:ba:
4f:74:24:50:e0:d2:34:60:44:59:62:35:5c:c8:db:fa:06:27:
ca:f5:05:34:b1:59:bf:94:a9:c5:2c:96:a5:1f:e0:20:fa:1a:
ef:1b:ec:52:1e:f0:12:2b:eb:80:24:5e:7a:08:70:34:67:18:
e6:7a:14:8e:06:da:f0:4d:ee:02:58:34:e3:48:a8:64:66:03:
77:b7:ec:99
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZfkfnCuk4Z6BABf975akWhEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNzA3MTA0NjIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzI5NDQzODkzMDkyMzA5YWVlZmNmMzg1NDdhNjU5ODA5YTFkZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bSF7fRUOxLs7yt2dLoI9v/YWcvc
NRR0UZIRIFkloUpaU1BFBHKZy3lAniI6V467mBL1Gqre7e2YAPmHOjrFs68Y/Jal
xD1I38PAqYf/wfBCyKlfRVDAezjN+qtkv4voXIKOSy82mnZn9kD5hdf/Pcp/FJ3L
LSBnuBdKWbrHPyt7nOzETKhoo3nUJnXtXOOTBYfkXP86ITHyi1xeHtZfTNivaFTm
OFuJuV0Esr6HgTU88mfdIAzvzzNuhQNazdC9ShUn+8Ev12wRmVtsFQny0Zz+UsKE
0lXiAX88UVZ+3T2PP3kyFybozi48yiBJ/Dozz0bBLDNJ1+fDvb9ZBUVd7wIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFEwpRDiTCSMJru/POFR6ZZgJod4tMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNmN2Y1
ZWE5LWIwNjctNDMzMC05NGI5LWI2YTNiNzM1YWJkMC8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvM2Y3
ZjVlYTktYjA2Ny00MzMwLTk0YjktYjZhM2I3MzVhYmQwLzAvNEMyOTQ0Mzg5MzA5
MjMwOUFFRUZDRjM4NTQ3QTY1OTgwOUExREUyRC5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDOncw
DQYJKoZIhvcNAQELBQADggEBAE6YULV/nVdY+MyR59ylFmTC8dHQoYVpyIs8qbeM
6/CzV0PDVwyB0RYzL11RcqcYYLmtAy72/RvgQQXKHufTo5hzaXQ/nuD4n7bwC8pp
ERCb7diIvHVAPs1A1Yy0sLzX77BlzsiO6koGxeIjYeOTQrggA9QxL2mOBP2kwrki
F50jDL/5qjspICivTwBnIBfPKLncI7e95Vhf6b+cJsYbySOR2WyTOpxo4kc1xwjK
eNidlhmquk90JFDg0jRgRFliNVzI2/oGJ8r1BTSxWb+UqcUslqUf4CD6Gu8b7FIe
8BIr64AkXnoIcDRnGOZ6FI4G2vBN7gJYNONIqGRmA3e37Jk=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:34:13 2025 by rpki-client