Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
File: TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer (raw, json)
Hash identifier: rmLC2fFS4ag/VEO/pC2bCVxDJnpedyxftMRDsKF1az0=
Subject key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBBA6FB81937D5E3B055D847929E22
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 196858
IP: 213.5.200.0/21
IP: 2001:67c:188c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ba:6f:b8:19:37:d5:e3:b0:55:d8:47:92:9e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d4:6e:45:78:23:77:aa:26:e8:6e:8f:58:1f:
73:4a:bd:ab:c9:c9:dd:7c:01:31:aa:6e:e3:37:2c:
92:ed:1f:35:d6:26:ff:9a:8c:83:b9:11:95:02:98:
e4:ca:fe:f2:6f:74:b7:65:91:95:5c:2a:d2:07:fa:
58:d2:b1:da:77:a0:db:8e:88:a2:c3:fc:75:78:2e:
6d:17:b3:07:c2:b7:ec:48:79:05:38:c2:f3:da:9c:
d6:a6:41:9e:72:ea:c9:2e:15:2b:70:17:5d:8c:4b:
56:61:83:72:73:49:b7:ba:eb:ac:cd:65:01:07:cd:
d2:29:57:4e:6a:db:60:c1:5e:62:e7:98:ab:01:95:
80:fa:57:cd:2d:b4:df:7e:6f:14:0e:63:6d:a2:39:
cd:7e:0f:15:5a:06:81:81:fa:51:1d:88:b0:37:bb:
52:7b:ff:f2:76:6c:b2:4e:94:1b:87:3d:8e:9f:50:
f2:06:c4:61:8e:bc:31:7d:e9:91:50:46:d1:df:9f:
0c:05:6c:0d:5c:45:01:88:9a:b2:e5:e3:8d:e5:1a:
1b:8b:40:ed:ee:39:44:14:32:54:a5:8c:3a:fd:99:
75:ba:b7:74:4d:a2:ef:ee:a8:c0:16:b2:5a:3c:3e:
07:fa:47:89:4b:c0:46:75:59:df:ae:8c:7b:1a:f8:
c8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.5.200.0/21
IPv6:
2001:67c:188c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196858
Signature Algorithm: sha256WithRSAEncryption
74:05:4f:a5:a7:3d:97:5f:d4:38:3f:07:5f:65:af:50:97:2b:
9e:1d:12:ad:60:e9:79:c3:0d:38:16:42:d6:83:49:12:3e:d2:
a4:3a:df:b0:46:6b:0e:0e:54:15:86:03:f0:e5:d4:ec:54:04:
55:2b:52:b5:ad:e4:94:1f:fb:04:16:51:89:d7:ce:75:68:c5:
4d:44:b3:90:8a:73:64:21:b4:14:f1:ea:ae:6d:99:47:70:9e:
b7:bf:15:3d:43:92:c8:d5:dd:3c:6f:b1:f1:9e:a0:9a:25:9c:
4b:e8:b2:75:f0:ae:a5:7d:91:d2:71:1e:45:c7:ab:ef:b0:2a:
05:d3:89:e1:73:57:20:86:be:7d:26:f5:b5:17:fd:4f:2a:ee:
df:8e:24:7b:97:43:88:ee:fb:d0:a6:6b:70:cc:cf:d7:91:1b:
dd:dd:6b:2d:6c:0e:3b:4a:77:e5:3d:5e:c4:63:01:44:fa:50:
81:fe:78:21:cd:93:47:d8:21:6c:f8:bd:8f:b1:74:88:69:f9:
5d:0d:ab:d8:7e:e8:a0:e2:69:dd:78:97:47:e6:4e:94:8b:9f:
39:78:91:f1:83:dd:1e:39:5c:3e:61:4d:6d:d8:96:e2:19:e0:
54:28:67:00:a8:ce:86:d4:42:80:70:b3:f9:fd:50:a4:d0:f8:
8c:47:a6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:17:55 2025 by rpki-client