Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
File: TddPu7rljdCHbZnoDsgqEaRHf34.cer (raw, json)
Hash identifier: 6L4AacucQuQ3SFR58XhUixi0CgU9cty4wcne2eySjko=
Subject key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428237A649D9B688ECDAE87C0CE78385C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:50:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25124
AS: 43245
IP: 81.91.128.0/20
IP: 91.184.80.0/20
IP: 94.139.176.0/20
IP: 109.162.128.0/17
IP: 213.207.208.0 -- 213.207.255.255
IP: 2a01:3c8::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:7a:64:9d:9b:68:8e:cd:ae:87:c0:ce:78:38:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:10:a7:b1:fe:f7:8b:1c:58:63:c0:fb:dc:
bd:fd:14:1f:4f:53:53:a1:a3:e0:82:20:a2:b5:39:
7b:b9:f5:d4:ee:6b:56:85:8e:33:ad:ca:47:76:89:
1b:61:33:ee:7d:77:af:41:23:80:2c:62:76:65:a9:
cf:de:a2:45:5c:cf:9f:9d:09:54:99:1f:78:71:e7:
6f:50:c8:dd:8e:1a:68:32:ca:b8:82:28:4e:8b:9c:
26:0d:6d:cc:13:b4:5c:36:00:49:b9:98:6d:e9:b7:
db:2c:7f:0e:7e:5d:a3:22:3a:43:b7:1e:db:19:76:
e0:7c:ee:61:c7:ea:f8:50:11:64:71:ec:5a:99:f0:
62:4b:56:6b:4c:e0:1d:a1:f5:cb:73:e0:d0:0c:18:
38:ae:00:0d:dd:f1:de:e5:26:02:8b:bb:ef:c0:dd:
6b:86:ec:2a:bb:eb:72:d0:c5:b2:0a:f7:73:70:fd:
7f:f7:ea:e5:9d:81:9f:21:c3:8c:4d:d8:d8:de:87:
2c:49:01:a5:d0:69:e3:6d:23:b9:a9:a5:86:61:c8:
b3:6e:29:fd:46:33:ea:f7:b9:02:0b:08:16:2a:bf:
84:d5:3f:b1:0e:10:ac:de:65:91:43:c4:42:07:d5:
43:68:82:2c:6d:5c:4f:b5:62:52:44:10:36:00:c4:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.128.0/20
91.184.80.0/20
94.139.176.0/20
109.162.128.0/17
213.207.208.0-213.207.255.255
IPv6:
2a01:3c8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25124
43245
Signature Algorithm: sha256WithRSAEncryption
04:2e:a8:66:b8:90:9f:a6:4f:a1:64:41:b7:c2:bf:6c:5c:76:
1d:e4:96:23:55:b4:f3:b6:7f:34:c4:d4:8b:23:91:54:59:b1:
9c:0c:25:6a:ee:8a:16:b1:07:67:a9:5a:0a:f4:c2:74:bf:78:
28:af:84:35:b7:31:23:11:63:20:75:cd:5d:79:76:31:e1:bb:
8b:81:1a:86:20:a2:e7:d9:b0:9d:cb:1e:9e:06:dc:03:f4:35:
db:18:b9:19:b8:a0:7a:b3:9a:c2:cc:08:67:20:42:1a:5a:dc:
4d:6b:78:c5:ff:25:39:34:1d:cb:c7:8b:10:38:6a:a4:96:26:
37:ab:a9:5a:d5:ea:d3:52:fe:e7:36:33:30:55:2c:ad:46:66:
3f:c5:5e:72:00:b8:b0:4a:ed:46:eb:24:bb:a0:ab:56:32:83:
18:c6:a8:e4:30:cd:79:16:48:4c:b8:f7:20:6c:93:d5:15:bb:
ea:78:90:3e:1b:85:a2:0c:6a:95:c2:17:81:61:89:a2:c7:2d:
88:3a:d2:a6:c5:42:07:d0:f5:62:7d:bc:0b:b7:99:bb:78:f9:
41:23:9c:f3:d6:e7:8c:7f:f8:1d:67:0f:80:ea:e8:07:4c:7f:
83:7a:1b:d2:79:b3:2b:e5:68:05:b2:47:d3:09:d7:b0:77:d1:
24:be:f2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:42:05 2025 by rpki-client