Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
File: TdlU08d8nE437r91PYbz3PCR1Kk.cer (raw, json)
Hash identifier: 3YfKnPwMOqWaqGZVHfHjwfHO+CDrb2ggudE8w5GIwFI=
Subject key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6A2067A85DA6DB3EE0B71F136CFBA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 155.137.32.0/19
IP: 159.197.128.0/17
IP: 161.8.0.0/16
IP: 185.203.192.0/22
IP: 185.213.220.0/22
IP: 185.215.116.0/22
IP: 185.217.216.0/22
IP: 185.219.32.0/22
IP: 185.226.4.0/22
IP: 188.116.52.0/23
IP: 194.34.104.0/23
IP: 209.16.177.0/24
IP: 209.162.154.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a2:06:7a:85:da:6d:b3:ee:0b:71:f1:36:cf:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:37:4c:28:c0:d2:71:aa:2d:5b:37:00:3f:4e:
b0:a1:f6:7f:14:d3:47:dd:c9:de:30:e3:5f:19:2f:
88:70:71:61:9f:bf:22:99:a9:89:7e:70:47:f7:25:
e1:9d:f2:c5:75:85:03:4e:2c:55:b0:21:75:e8:29:
ee:68:49:c6:44:a3:31:3c:40:45:dd:8f:0e:0e:79:
2f:69:5f:de:56:a9:1d:a4:44:b0:90:c2:e2:a9:78:
a5:97:db:9b:9b:5d:e8:f4:0b:18:59:48:c8:49:4a:
ae:ac:e0:f4:e4:7d:87:63:b7:d9:72:bf:18:39:19:
95:9c:85:d1:8a:a7:71:e3:a9:d4:54:7f:1b:d3:19:
e8:4d:eb:ab:f1:eb:c9:10:a5:33:b1:55:23:fb:fe:
93:a6:71:51:b0:af:23:53:22:e1:34:ad:b3:a7:7a:
cc:b1:9c:5b:9f:6e:97:fb:e5:c3:32:fa:fb:30:27:
d0:66:9d:f3:61:dc:60:c2:14:bb:db:8d:05:bd:ca:
3f:4d:5b:6f:20:d9:94:42:4d:c0:a2:b4:83:7d:f6:
16:14:86:7d:51:41:c6:fc:8c:01:07:bd:a8:f6:1b:
ca:fa:8d:da:83:c3:12:90:39:bc:28:c6:70:5c:d2:
76:18:94:2f:5a:55:99:7a:07:b8:6c:e9:f5:e8:3e:
bc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.137.32.0/19
159.197.128.0/17
161.8.0.0/16
185.203.192.0/22
185.213.220.0/22
185.215.116.0/22
185.217.216.0/22
185.219.32.0/22
185.226.4.0/22
188.116.52.0/23
194.34.104.0/23
209.16.177.0/24
209.162.154.0/24
Signature Algorithm: sha256WithRSAEncryption
58:78:76:90:2e:58:ac:71:2b:af:b6:c5:6b:5e:b8:b3:c1:e6:
3f:9e:72:e6:64:ba:25:2a:aa:7a:df:ee:86:88:20:68:d2:ec:
d0:e9:e3:60:97:9a:76:42:4e:ab:2f:d9:9d:c6:a4:40:c5:3b:
6d:10:2e:d1:17:77:46:88:51:ca:2d:3e:ac:13:7e:ae:f9:5e:
0a:18:9f:03:44:89:18:2e:0a:2f:67:7b:9c:1d:98:ba:7c:6d:
56:b5:a4:cd:25:6b:bb:73:02:db:37:82:7b:4d:33:f9:2f:39:
62:b1:d4:5a:c0:2d:7c:77:d0:a1:c0:fc:17:1b:e9:03:45:1e:
e8:ec:34:d1:9f:3a:14:1d:49:ff:12:89:eb:09:16:e4:5e:a8:
fa:8c:18:f1:02:8a:bc:81:e3:d9:3b:cc:a4:1d:16:17:0f:3a:
51:10:13:dc:e9:c4:d6:a4:18:fe:31:3c:41:19:1c:b9:e5:74:
50:8a:9e:17:2f:da:60:56:88:d8:7e:e1:9a:c1:07:02:0a:45:
17:e5:72:fb:e1:0e:0f:f0:7b:28:41:2e:77:db:d5:8f:bc:cd:
37:ad:cc:c7:7b:a5:55:fe:22:63:42:d8:d5:11:93:fe:d3:80:
26:af:af:09:9d:7d:43:86:f5:6e:ee:c7:37:49:3a:57:fc:f7:
86:7e:14:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:51 2025 by rpki-client