Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer (raw, json)
Hash identifier: NKMlGzuybkexk109hGpseROhuEBIC9G/Nu9UcTJR2Jc=
Subject key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5EEA247AA8552F74A26BCA56FC1A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2f50::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ee:a2:47:aa:85:52:f7:4a:26:bc:a5:6f:c1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:65:9d:7b:65:20:a9:45:d2:a5:95:91:de:77:
b8:23:ed:99:35:4c:2d:ef:fc:83:de:e7:a2:85:7a:
5b:5d:a4:eb:bc:ba:ae:b1:b0:d2:ad:f0:2e:51:2b:
f6:a5:ef:77:d9:35:99:25:0e:82:55:7b:28:79:bc:
c6:8f:d4:04:ef:15:9e:db:42:49:27:6e:5c:3b:68:
83:d9:ca:bc:e6:b9:a6:7c:08:a5:17:f3:3f:a0:2f:
33:3f:15:8b:19:e6:94:28:d2:5e:24:71:0f:38:01:
33:9d:31:af:60:08:1b:79:fd:db:2b:fa:ff:79:c8:
cf:cf:79:30:b9:d1:54:a3:86:aa:25:70:21:8f:5b:
6d:35:5b:2a:74:a4:86:ba:71:05:a3:55:4e:00:3c:
e7:cd:cb:1e:a5:c2:1a:51:75:66:9f:f8:98:18:38:
52:74:f4:e7:e7:ae:27:0b:98:09:7f:7e:aa:39:93:
b7:4e:c3:6f:e4:fb:7a:1c:a2:fb:12:73:d8:7e:09:
31:9a:31:2c:5f:e7:b7:3d:b0:f3:0b:a7:69:ed:67:
b1:fe:a4:05:a2:b8:7e:ed:39:01:66:db:f7:ef:18:
de:5b:70:a1:f7:af:f8:67:83:17:18:a6:a9:2e:6f:
50:52:79:74:0b:25:f7:26:69:e7:54:06:8d:81:d9:
04:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2f50::/48
Signature Algorithm: sha256WithRSAEncryption
5f:d3:b3:2d:d5:b5:20:ec:0b:7b:b5:a6:8c:9d:ae:72:ce:2a:
1b:4f:90:18:7a:d7:36:70:26:79:8e:df:17:f1:7e:10:44:86:
9a:22:9d:dd:1b:c3:32:ca:86:77:56:1e:11:29:f8:d9:cc:47:
61:92:0d:f6:5d:df:dc:a7:12:25:05:20:96:29:c9:cf:7d:a6:
8e:71:1b:01:91:82:bb:9f:34:73:af:e5:c8:74:5b:f7:96:75:
2f:33:09:2c:91:c0:d0:82:38:9f:09:75:da:35:ea:87:59:eb:
ed:96:bd:98:68:e2:fd:b9:18:08:b7:e7:17:9d:f0:72:d8:2f:
0e:e1:a9:b4:39:93:3f:30:5f:49:c6:43:0a:f7:b9:74:76:db:
4c:35:aa:9f:7d:2f:93:ab:13:86:0f:ee:0a:a2:4b:60:47:ee:
74:84:20:73:cd:a4:88:33:e0:7d:f5:6c:8e:c8:02:e7:62:8c:
31:45:79:fe:17:34:6a:5e:27:44:01:a6:b6:d9:91:f9:36:ae:
b2:bc:d5:09:f9:27:8e:8e:17:2e:ce:a3:3b:e2:57:c8:b9:4d:
be:0e:69:ff:e2:bd:bf:dc:b2:e8:9e:28:c0:5d:d0:72:6d:9a:
ca:d3:c1:5c:5c:72:0c:18:a5:90:60:f1:67:6d:22:86:be:c7:
44:ad:6b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:30:01 2025 by rpki-client