Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.cer (raw, json)
Hash identifier: 0Eh3HwGxDyrBCE0YzqZFsAvLArR3JBP1GECycrkZYY4=
Subject key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196003CB232B53210258B52145C3319C851
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 04 Apr 2025 09:58:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25369
AS: 49999
AS: 52167
AS: 58325
AS: 200039
IP: 5.226.136.0/21
IP: 31.14.102.0/24
IP: 31.14.254.0/24
IP: 37.10.113.0 -- 37.10.114.255
IP: 46.102.155.0/24
IP: 46.247.142.0/23
IP: 64.239.236.0/22
IP: 77.81.102.0/24
IP: 77.81.124.0/22
IP: 77.81.191.0/24
IP: 79.139.84.0/22
IP: 80.240.108.0/23
IP: 81.19.208.0/20
IP: 82.97.192.0/23
IP: 84.247.0.0/24
IP: 84.247.40.0/22
IP: 85.204.70.0/24
IP: 86.54.136.0/22
IP: 86.104.20.0/22
IP: 86.104.248.0/22
IP: 86.106.89.0/24
IP: 86.106.112.0/24
IP: 86.106.135.0/24
IP: 86.106.157.0 -- 86.106.158.255
IP: 86.107.241.0/24
IP: 89.21.64.0/22
IP: 89.32.127.0/24
IP: 89.34.96.0/22
IP: 89.35.25.0/24
IP: 89.35.28.0/22
IP: 89.37.64.0/22
IP: 89.37.172.0/22
IP: 89.38.68.0/23
IP: 89.40.212.0/24
IP: 89.46.222.0/23
IP: 89.46.248.0/22
IP: 93.113.175.0/24
IP: 93.114.83.0/24
IP: 93.114.129.0/24
IP: 93.118.40.0/22
IP: 94.177.17.0/24
IP: 109.69.104.0/21
IP: 109.70.144.0/21
IP: 109.230.203.0/24
IP: 109.230.209.0/24
IP: 109.230.215.0/24
IP: 109.230.218.0/24
IP: 109.230.220.0/24
IP: 128.127.148.0/22
IP: 134.255.243.0/24
IP: 176.223.172.0/22
IP: 178.239.160.0/20
IP: 185.3.236.0/22
IP: 185.16.204.0/22
IP: 185.28.252.0/22
IP: 185.38.148.0/22
IP: 185.44.76.0/22
IP: 185.61.156.0/22
IP: 185.114.224.0/24
IP: 185.121.136.0/22
IP: 185.125.204.0/22
IP: 185.134.20.0/22
IP: 185.137.36.0/22
IP: 185.158.240.0/22
IP: 185.200.204.0/22
IP: 185.216.144.0/22
IP: 185.223.232.0/22
IP: 185.242.80.0/22
IP: 188.212.154.0/24
IP: 188.240.56.0/21
IP: 188.240.71.0/24
IP: 188.241.120.0/24
IP: 188.241.144.0/24
IP: 188.241.156.0/23
IP: 188.241.246.0/24
IP: 193.32.208.0/22
IP: 193.124.20.0/23
IP: 193.176.28.0/22
IP: 194.50.234.0/23
IP: 194.50.250.0/23
IP: 194.88.96.0/21
IP: 195.20.108.0/23
IP: 195.140.212.0/22
IP: 195.206.165.0 -- 195.206.167.255
IP: 195.206.169.0 -- 195.206.171.255
IP: 195.206.180.0/22
IP: 195.234.124.0/23
IP: 195.234.127.0/24
IP: 212.237.224.0/22
IP: 213.166.84.0/22
IP: 217.146.80.0/20
IP: 2a00:1a30::/32
IP: 2a01:4020::/32
IP: 2a0b:b840::/29
IP: 2a0d:7440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:3c:b2:32:b5:32:10:25:8b:52:14:5c:33:19:c8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 4 09:58:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:16:6d:97:9b:a4:24:de:4c:7b:53:5e:79:45:
0c:39:25:d0:06:16:e0:16:c2:73:ff:0c:3d:46:c5:
0c:f3:4e:b2:b0:83:27:62:5a:1c:e7:ee:04:36:dc:
c5:4b:32:ba:c1:f0:3d:0b:9a:45:69:32:fd:57:c4:
3f:9a:27:7b:10:ab:18:02:75:31:58:35:68:ce:e1:
9f:c5:2c:d2:f9:ff:eb:ed:66:b5:39:ea:3f:33:67:
cb:b7:cc:a1:88:bc:90:b0:5b:95:15:72:ae:b1:4a:
8a:3c:f3:93:46:0b:23:02:ef:55:93:48:69:98:77:
97:2e:7f:ac:eb:4b:ca:8b:c4:0e:15:fd:79:2d:9c:
9a:fc:52:3b:ec:3d:f5:d1:19:70:c8:50:bf:10:ca:
17:9c:c6:c6:98:0b:0b:26:75:92:b7:34:e9:2b:c9:
2c:40:0f:11:e1:aa:26:dc:da:59:f0:a3:c9:87:76:
17:a3:05:23:d0:50:eb:3e:ca:18:af:31:2a:f6:0d:
23:7d:81:88:3f:5e:fc:6d:5a:ce:70:f3:06:e6:ca:
73:d3:6e:74:b7:25:94:e9:95:13:78:f4:72:e3:19:
d9:af:7a:b2:8a:8a:77:2d:c5:e5:58:8a:2f:c6:71:
79:b9:5c:f3:55:67:97:ed:9b:75:7b:b5:92:66:a5:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.247.142.0/23
64.239.236.0/22
77.81.102.0/24
77.81.124.0/22
77.81.191.0/24
79.139.84.0/22
80.240.108.0/23
81.19.208.0/20
82.97.192.0/23
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.54.136.0/22
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
93.118.40.0/22
94.177.17.0/24
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.28.252.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
185.242.80.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.124.20.0/23
193.176.28.0/22
194.50.234.0/23
194.50.250.0/23
194.88.96.0/21
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
2a0d:7440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25369
49999
52167
58325
200039
Signature Algorithm: sha256WithRSAEncryption
62:f0:eb:13:af:98:00:6e:af:c2:90:e0:54:53:51:48:b4:9f:
df:73:f4:f6:99:fd:7e:3f:f1:66:9f:a7:a1:34:9a:03:ab:d3:
24:27:00:1b:02:15:9d:b8:74:e6:9b:fb:7c:2d:e7:01:39:2f:
5a:03:7c:81:cb:94:57:d5:30:b4:64:50:32:0b:ca:27:e2:ed:
e6:db:10:5b:30:40:02:d4:88:4c:33:52:ef:3c:18:81:a1:cd:
36:37:04:96:a2:6a:51:0b:68:ab:e6:3a:49:b4:37:93:62:1c:
ac:ae:31:1a:70:66:2b:96:80:06:e6:d9:fe:cc:55:5c:af:11:
7b:68:5e:fc:9d:f1:a7:6b:6c:86:ff:46:70:f8:67:9a:8a:89:
1f:10:8d:1a:af:84:bb:b2:93:4f:3b:38:7c:91:ff:ca:39:7f:
04:83:cd:49:9d:9e:32:c0:5e:18:96:79:d8:db:e4:fe:93:16:
17:1e:f8:e7:f4:99:e5:01:ce:fc:66:15:47:d9:7c:66:67:64:
eb:23:23:c7:62:fb:c7:38:18:fa:79:d4:57:d4:30:f5:e9:d3:
80:d8:34:64:73:49:9d:24:92:63:9e:60:3f:05:7e:5c:ee:83:
43:0e:d4:bc:98:f9:1a:b1:d1:c4:9f:f3:07:ee:c4:58:5a:90:
e5:dd:ee:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:34:11 2025 by rpki-client