Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tATMDgOOsOaX7G565J0ChhRuDBo.cer
File: tATMDgOOsOaX7G565J0ChhRuDBo.cer (raw, json)
Hash identifier: PF1R/RIytDJOowmMBEHZKb7uODyyJeEoNbs+9l1VYTI=
Subject key identifier: B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019740CD525F43A39CF2879101074E44737B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 05 Jun 2025 15:54:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58026
IP: 45.3.32.0 -- 45.3.55.255
IP: 45.3.60.0 -- 45.3.62.255
IP: 65.111.0.0/19
IP: 74.122.24.0/22
IP: 104.167.19.0/24
IP: 104.167.25.0 -- 104.167.27.255
IP: 104.207.32.0/19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:40:cd:52:5f:43:a3:9c:f2:87:91:01:07:4e:44:73:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 5 15:54:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b404cc0e038eb0e697ec6e7ae49d0286146e0c1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:3e:99:09:8a:81:e7:e8:7e:14:21:ca:0c:
6b:9b:85:eb:7c:b0:f2:b6:e7:d8:7a:4a:12:1c:b2:
d6:38:a3:66:a2:20:0e:a2:f0:5c:dc:68:b4:56:35:
01:4d:8d:db:d0:64:2c:23:06:5e:d7:fe:72:45:a6:
ca:d9:1b:00:6e:03:cc:1f:1b:7d:c5:92:cb:3f:c8:
f1:5a:19:c5:5d:e9:86:48:01:f1:4c:1d:a4:16:6f:
bc:64:19:34:25:5f:ed:23:92:72:b5:79:7e:a2:16:
4f:4d:19:70:15:77:9b:84:a2:20:d5:f9:33:e0:63:
85:e6:33:47:86:d3:1d:e8:84:69:e0:a1:71:cd:9a:
3f:85:94:f7:56:c1:fb:6a:a5:12:cb:2a:f9:36:39:
31:3f:d8:7b:b6:bb:3c:2a:9a:b2:29:97:93:74:9c:
92:30:f0:65:5c:32:5a:b4:b9:f4:e1:3a:35:91:03:
d6:f8:05:d0:0e:dc:19:94:8d:04:69:c8:77:82:f6:
d7:dc:2b:b3:11:65:a8:e1:82:e8:42:ce:bb:01:3a:
93:57:3b:c6:67:ab:6a:a1:71:34:ce:a3:62:72:31:
60:ac:82:43:d6:fc:5d:57:44:d4:09:aa:af:3c:35:
d7:c2:75:f6:f0:b5:4d:ac:7e:3f:1b:7d:04:88:fb:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:04:CC:0E:03:8E:B0:E6:97:EC:6E:7A:E4:9D:02:86:14:6E:0C:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/abe16b-92cc-48e3-b5b9-86a2f067b4e8/1/tATMDgOOsOaX7G565J0ChhRuDBo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.3.32.0-45.3.55.255
45.3.60.0-45.3.62.255
65.111.0.0/19
74.122.24.0/22
104.167.19.0/24
104.167.25.0-104.167.27.255
104.207.32.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58026
Signature Algorithm: sha256WithRSAEncryption
b0:cd:81:f3:20:4d:5a:21:38:d6:d0:c5:d6:bc:a0:5a:a9:ae:
6d:2e:d1:86:14:07:05:11:00:eb:a5:63:c9:a0:16:17:4f:ee:
22:47:5c:93:d6:12:99:bf:0f:d7:eb:3c:6b:4f:7a:ba:5e:64:
74:f3:98:27:fc:13:05:e9:0e:58:7e:53:49:f5:11:08:0a:ed:
ac:54:ab:b6:97:c4:80:99:db:ff:81:d8:29:63:c8:80:84:af:
54:f9:32:96:09:17:78:f3:28:79:fb:54:1d:07:e0:75:9e:53:
1f:98:e2:e8:b9:f9:b5:7e:58:2d:dd:41:31:10:76:30:86:fe:
ea:49:fa:b7:a7:dd:d7:1f:fa:41:88:e6:07:50:1e:c4:45:8b:
39:ad:d3:5e:e6:d3:d5:e3:e6:07:f7:a9:fb:4e:d4:90:76:6b:
7a:5e:78:57:df:37:be:8f:8d:c5:0b:a1:77:e3:a9:74:6b:c4:
5e:1b:7c:8f:26:bb:52:60:8a:5e:24:f3:ae:2d:4e:8b:ec:12:
00:44:54:62:e3:39:b4:b8:17:88:51:7b:83:92:7f:36:c1:84:
e4:65:56:70:e3:d8:c1:5f:85:dd:e5:91:66:b7:a0:49:71:67:
cc:9b:f8:c4:db:bc:75:63:ed:2f:c3:dc:26:a7:06:49:06:c1:
fe:b4:04:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:52:48 2025 by rpki-client