Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
File: TkwTiahJ713MuDA3A7iYyR5j0U8.cer (raw, json)
Hash identifier: 1X0LSCbA97kU79A1YDp4q/1R+SjOJGndCL9ZsBHPsQs=
Subject key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444D0193F971441036CFEB57541E88B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 152.89.220.0/22
IP: 2a04:e340::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d0:19:3f:97:14:41:03:6c:fe:b5:75:41:e8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:77:e3:a4:88:f6:3b:66:6c:c4:85:e8:38:5f:
f4:f2:c5:60:0f:31:72:a9:4a:4f:2e:02:57:0a:3e:
1a:1e:30:f2:5c:0f:7a:22:9f:96:5c:d4:9a:ee:69:
54:5e:0d:80:ad:bb:81:4b:a8:0f:9e:fd:6e:2d:56:
9f:f1:b1:b8:39:84:b7:4d:d9:bb:31:7b:91:4e:0a:
3e:f6:50:a8:ff:ac:34:56:1e:a3:a8:0f:73:2b:4d:
0d:d5:45:b7:77:99:6b:e6:25:ab:5f:a5:c2:4b:31:
7e:6d:35:f3:99:08:aa:58:66:ce:b3:ce:e7:ad:c0:
cc:a4:2d:7c:34:04:11:98:7d:c0:09:81:12:d1:f4:
d3:c8:7f:e7:cb:d0:f3:fe:41:8f:7e:db:7c:5c:de:
88:ff:f3:dd:81:a9:e6:69:c1:f6:6b:02:8a:f3:38:
9e:03:e1:56:e7:cb:05:98:5e:f4:02:f3:8a:d1:03:
a2:46:e9:78:cb:3d:45:72:26:29:ea:37:bd:bb:2e:
14:ca:5a:f2:d0:92:bb:fa:fa:d9:18:54:fc:ed:d2:
0e:e0:b3:27:f8:8c:41:8b:79:0d:0c:7c:70:11:a0:
3e:21:93:a3:56:1a:4b:1d:fc:16:f0:33:92:0e:3e:
b6:41:24:7f:9a:0f:a2:bc:3f:93:65:36:a1:9a:69:
bb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.220.0/22
IPv6:
2a04:e340::/29
Signature Algorithm: sha256WithRSAEncryption
00:68:29:ac:ec:39:b9:d3:18:3d:63:33:64:f2:40:cc:0e:52:
b5:26:fd:48:d4:49:f7:39:f2:d2:2b:77:83:a6:4e:16:ea:d9:
cb:7e:e4:5c:ed:22:55:ee:55:75:1a:df:8c:80:d9:ce:22:1b:
36:da:b4:91:43:52:1e:65:90:bb:37:c1:38:0d:a3:0f:e7:1f:
b3:5c:f7:f9:28:11:01:89:59:90:ad:21:b8:66:8a:ea:c0:51:
8a:65:5e:7c:7b:17:e1:99:2e:a9:2d:c5:76:5b:84:e8:32:06:
37:f1:f8:dc:ab:6f:5c:fc:f8:fa:68:93:3a:78:f0:fd:10:db:
f3:8a:ed:29:7d:d3:c8:6f:42:f4:ec:3e:ab:32:98:e9:ac:7a:
7a:91:1f:00:75:4c:c1:4b:b0:1f:1c:2b:1c:d1:af:f0:fb:7e:
de:2b:25:b1:ce:9a:91:bd:2e:5b:e2:cc:11:11:17:3b:2a:27:
0b:f9:06:b0:de:f7:60:86:54:2f:38:86:82:3e:bf:5e:bb:1c:
36:93:31:1c:04:11:e8:39:46:e3:a7:ac:ea:a5:93:58:6e:6c:
98:a5:96:30:89:aa:f9:31:ff:a4:c7:32:6a:c7:4a:b7:70:78:
6f:ec:8e:a9:ca:fb:3d:b0:39:cc:c6:41:6b:b9:2d:66:97:54:
17:6b:44:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 12:14:29 2025 by rpki-client