Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer (raw, json)
Hash identifier: vWQrbtLAbm3RjwI57H/e/kav4hboykcwwf8XuU4QbW8=
Subject key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B25C19CD2AC005E95F855798662E5C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.150.104.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:5c:19:cd:2a:c0:05:e9:5f:85:57:98:66:2e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:2b:e6:0c:d4:2b:c2:90:08:db:25:b1:4a:
88:fa:7e:ed:69:0b:97:3b:0e:89:48:62:0d:2b:c6:
48:e2:1f:30:a8:8c:5c:10:22:1e:2d:81:43:8c:73:
93:52:1f:58:e5:55:1a:10:38:d7:77:1a:05:1e:8b:
92:19:c1:41:c8:16:0f:8f:8e:30:cc:3d:29:72:73:
a5:33:0a:87:64:d6:d9:59:00:54:d9:45:68:b2:bd:
eb:07:2a:06:d9:8b:bb:c0:7d:00:3d:23:4a:bb:26:
e2:17:03:1f:76:1b:49:3e:dd:5e:2a:63:e7:4c:5f:
b0:e1:4f:a5:ff:f6:e3:79:f6:c9:06:6e:c1:3e:71:
a4:f8:a7:7b:78:bb:37:90:4f:f7:2f:6f:02:45:fc:
ea:41:ac:3d:b0:7c:0b:71:b7:51:de:ef:96:8e:c9:
88:ce:a2:29:46:36:8f:61:2f:2a:23:75:cc:6d:eb:
02:d3:f5:c9:7e:55:3a:95:e8:b4:05:b7:79:f0:0e:
db:e7:c8:46:43:c6:41:6a:fa:65:da:2e:47:41:00:
1e:58:60:36:2e:2b:2a:8b:43:44:a1:35:5a:78:8b:
d9:9f:9c:ff:12:b9:99:b1:cf:76:92:71:7d:40:c2:
31:37:ba:7c:ab:64:13:4c:c6:00:1f:ba:7f:de:10:
36:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.104.0/22
Signature Algorithm: sha256WithRSAEncryption
43:25:e0:15:ce:9c:18:b6:bb:ec:9b:b0:f6:ee:c2:2c:39:c9:
e7:2a:2e:2b:47:92:3c:e3:69:c1:cc:af:d8:8c:2d:1e:72:1a:
a0:73:6d:ea:76:d7:df:3b:be:5f:89:9b:c5:6c:63:44:2b:d0:
ef:de:fc:58:72:4a:a0:11:8c:1b:d8:2a:82:bb:92:ec:d9:4e:
77:ac:8d:11:9b:ea:73:31:9c:8a:db:bb:d6:15:af:55:fb:3e:
e7:ac:e1:a6:7f:25:13:75:c4:d6:32:3b:80:37:42:8b:63:eb:
a4:7f:86:46:d8:69:63:60:9d:d3:78:ba:96:a5:4e:cc:4b:cb:
62:c1:36:2e:e2:fc:cf:7c:6c:fe:77:06:f4:5e:ab:47:b2:86:
d5:da:51:a1:bf:9d:5c:53:85:ae:46:39:e9:ae:62:6a:13:74:
3a:46:d5:82:f4:03:bb:12:64:c3:4a:0f:21:53:d9:90:46:9f:
cb:34:ca:82:80:9b:a9:6e:89:fb:5c:36:de:c4:f7:cd:88:8e:
95:f8:64:46:db:b5:88:39:4d:66:48:6a:32:5c:ff:7b:dd:a7:
f4:a2:c7:b1:0e:e6:ba:80:77:56:f8:fa:12:b5:f1:06:25:7d:
e6:65:bf:53:5d:11:6f:fb:17:c3:52:7a:ef:ee:43:d2:2f:73:
69:47:d3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:57:55 2025 by rpki-client