Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TTpxp39MqbpTb5hhKpxW1AwMO50.cer
File: TTpxp39MqbpTb5hhKpxW1AwMO50.cer (raw, json)
Hash identifier: 7d2X1iRiCdpgZklUgc5J+EFPJilabwYxHgiQhmuh/oo=
Subject key identifier: 4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D709F485AB2E31527FA85B528CB679
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.82.188.0/22
IP: 2a0e:7280::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:09:f4:85:ab:2e:31:52:7f:a8:5b:52:8c:b6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d3a71a77f4ca9ba536f98612a9c56d40c0c3b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:c3:aa:f2:0e:77:f4:6c:7e:6d:6e:b8:04:
a7:99:5e:be:90:e1:e4:63:50:8f:53:31:3f:9e:a9:
9d:dd:09:f8:d3:09:5f:b3:6b:2e:d3:1f:93:45:63:
e5:37:d8:85:5e:87:47:16:c9:73:19:3b:db:74:92:
94:3a:9f:13:8f:c4:0f:8f:0a:f3:16:d5:4f:eb:db:
c6:27:fb:1c:fa:bd:9f:83:d2:f8:cc:f6:be:a0:98:
7f:7f:5b:12:3d:78:c1:81:4f:fe:20:39:85:d0:bc:
e4:12:eb:57:c1:61:a3:e9:e6:57:37:7a:e0:3a:88:
0f:1f:49:42:1b:81:03:89:0f:2e:3e:37:f3:48:cf:
f9:a2:80:98:a0:17:69:bd:ea:ad:03:b2:b1:27:45:
35:b3:b6:cd:a3:be:1e:11:71:e0:94:ee:e9:d4:18:
01:22:36:05:c5:08:ba:53:02:82:13:56:19:2e:c7:
fe:67:0d:9e:18:a1:50:8c:6d:ea:be:98:3d:8d:b3:
1b:12:9b:c1:4f:e4:67:01:35:d9:79:98:91:57:22:
ea:36:af:c9:79:1d:ce:30:c1:d4:17:cf:46:eb:3f:
cb:10:56:d3:fe:50:bb:98:33:ba:c1:a4:3b:e8:8d:
90:ba:a5:a1:00:65:6f:de:13:9c:f5:cc:20:89:3a:
a4:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3A:71:A7:7F:4C:A9:BA:53:6F:98:61:2A:9C:56:D4:0C:0C:3B:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/887501-4d8e-4beb-9590-65079b75868a/1/TTpxp39MqbpTb5hhKpxW1AwMO50.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.188.0/22
IPv6:
2a0e:7280::/29
Signature Algorithm: sha256WithRSAEncryption
2d:dc:b6:b8:a7:09:aa:64:23:2c:85:b9:f3:93:19:bb:4c:10:
5a:b3:9e:aa:84:6d:5b:a9:64:da:45:bc:35:85:de:07:89:02:
79:75:f7:7d:01:13:98:1e:03:f9:4f:de:8d:7b:31:15:88:14:
fa:22:27:0d:89:d7:e3:b5:c7:c5:a1:c7:6a:5b:67:d9:1b:b0:
b0:3d:93:b5:6b:d0:7e:8b:02:15:e8:0c:dc:22:0b:64:82:aa:
fa:94:20:5f:82:66:cf:5c:07:f7:3d:fd:db:95:85:d5:0e:8a:
70:43:e2:2e:eb:50:f3:80:ee:f1:d4:43:6e:51:c4:5f:03:04:
cf:fa:4b:53:79:15:66:ce:f7:14:68:f3:26:31:5d:d8:79:8b:
29:69:79:1b:a6:f0:50:73:75:f1:89:b0:20:b5:23:49:1c:bf:
c1:1c:8b:ad:4e:ce:0c:ef:07:c0:88:87:60:4d:aa:6d:d0:9e:
b3:86:c6:87:87:07:0a:c9:20:78:46:72:20:cc:37:9d:a7:79:
c4:47:96:91:3a:7b:19:77:9c:f6:2e:2c:62:be:3a:c6:1c:fb:
45:0f:8f:fa:3e:5a:97:3e:4f:b9:2f:28:c3:1a:82:35:54:bc:
3f:4f:eb:e4:29:1b:fe:52:ee:7a:c0:29:30:9c:3f:10:37:95:
59:60:77:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:34:39 2025 by rpki-client