Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TNkIkaeTL3NWqAMznaDM32OtLTU.cer
File: TNkIkaeTL3NWqAMznaDM32OtLTU.cer (raw, json)
Hash identifier: Sz/xFGXP0MOW/abodkzG1YHNy7pZ80UrAmiI7gF7K5U=
Subject key identifier: 4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019685C07DC0B87C885CDDE44AA236F90B29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 30 Apr 2025 08:11:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.198.8.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:c0:7d:c0:b8:7c:88:5c:dd:e4:4a:a2:36:f9:0b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 30 08:11:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cd90891a7932f7356a803339da0ccdf63ad2d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b3:9f:fb:f9:1a:7b:97:92:b3:ac:b3:e0:0f:
75:b1:85:f4:2c:d4:d7:bd:6b:9a:31:91:c0:25:6d:
f3:af:69:fd:6d:c2:c4:fb:20:bf:e9:c0:35:af:82:
3d:b4:51:cd:10:45:8d:bc:1f:95:1f:78:e5:93:23:
e5:b4:13:57:2d:62:7e:a4:80:f5:44:bf:d1:c7:3f:
be:70:d1:e2:28:8a:9e:e1:1e:2c:43:85:5e:c4:c3:
5d:92:4c:d2:71:f3:8d:e6:09:01:db:86:b8:73:4c:
14:1a:63:b1:53:2e:41:7f:af:b3:17:6b:6f:b9:c8:
3d:64:10:91:0d:06:c6:64:60:d9:d0:bf:ad:d5:36:
01:02:05:7b:32:1c:0a:e4:90:d5:35:45:a6:b0:b3:
4b:a5:ac:42:e0:11:95:fd:8e:bf:1e:e8:28:bf:f4:
34:21:ab:bd:c7:10:84:bd:56:d8:11:d6:2a:99:82:
52:b6:59:95:aa:6a:8f:85:8f:00:80:3d:e5:c3:3a:
03:f1:40:7c:4b:3d:90:4f:c0:70:f7:db:50:d1:5a:
d7:1a:7c:e1:2b:33:99:85:1a:aa:03:6a:85:03:80:
9a:b7:fa:6b:64:67:24:03:22:83:19:12:09:d5:b0:
0c:13:6b:6b:94:12:49:e6:0d:00:b8:7c:ec:4f:84:
15:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D9:08:91:A7:93:2F:73:56:A8:03:33:9D:A0:CC:DF:63:AD:2D:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6a9378-2fa7-482d-8c7c-69ca4cb65f97/1/TNkIkaeTL3NWqAMznaDM32OtLTU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.8.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:0f:bb:73:f9:35:a0:6c:44:07:6c:61:2d:5d:58:e6:4b:11:
0b:05:89:31:9d:0a:6a:9c:19:87:22:01:ba:90:1f:14:4e:3d:
d7:76:ea:36:78:bb:a1:b9:97:2b:5e:0e:47:48:f9:45:a4:cc:
4a:37:63:f3:e3:ae:f3:6a:2c:17:ac:09:35:61:f6:03:f3:73:
63:ed:35:e0:05:02:fe:75:7a:9b:0a:87:16:b5:b5:ac:27:93:
f9:65:2a:7a:ae:bc:9f:2e:28:c4:68:34:77:08:a5:05:73:eb:
cd:08:cc:da:14:c6:93:b3:89:aa:75:65:23:48:32:95:8e:9a:
a9:be:7b:17:37:97:a2:88:2c:f6:39:0e:a4:96:8f:e3:36:df:
ca:da:0a:84:b4:35:b1:a7:0a:5d:25:6b:1f:c1:cf:b0:6c:c4:
51:74:cc:01:9d:54:6a:f2:26:cf:79:98:2f:14:74:18:1a:21:
8a:b5:17:93:82:3b:a6:16:99:db:a0:6c:c0:ee:98:4b:c7:c4:
2f:50:fe:0e:4a:0d:2c:d2:d4:14:fc:52:e6:06:1e:9f:60:31:
fa:c6:2f:0f:30:32:a2:8d:30:6e:c1:42:c0:de:a9:f9:a5:99:
80:6b:57:2b:b2:62:36:1a:c5:05:ac:e1:0d:bb:90:2c:59:57:
bb:16:01:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:38:21 2025 by rpki-client