Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
File: totCki04fFePpXaSSH8qGQaFibo.cer (raw, json)
Hash identifier: IUhFAVQoy1Tckm4FWVYGSBnTX3sy3CLvWjjP8FAZjUM=
Subject key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424457B803DF10B2B570202C82D95589B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209582
IP: 188.190.108.0/22
IP: 2a0d:d1c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7b:80:3d:f1:0b:2b:57:02:02:c8:2d:95:58:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b68b42922d387c578fa57692487f2a19068589ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:19:77:3f:f0:8a:4c:a1:b4:6f:a3:1f:9a:11:
8a:14:04:75:1b:da:1b:ae:06:44:06:34:c2:b1:52:
1d:f8:c1:b0:66:47:e2:18:08:89:8b:51:78:a0:e3:
c4:96:d2:98:91:32:24:fe:8e:6d:77:fe:e9:fc:e6:
03:57:31:6a:08:a8:df:79:a4:86:5f:bb:05:ef:f3:
5e:19:a7:c7:03:44:9c:c0:23:64:62:24:03:e0:95:
22:75:cc:ce:d8:46:66:0d:76:9e:88:ee:64:43:10:
4c:77:ed:cb:8d:0d:98:a2:6e:6a:7f:bf:30:96:b2:
81:fc:e6:79:5d:fe:9f:08:9c:52:09:48:58:86:03:
9c:53:4c:99:7e:69:59:18:94:33:7d:2e:bb:89:b0:
9c:14:69:9d:b4:d4:fd:be:92:db:af:ba:0e:7b:cb:
93:68:15:1c:ed:9e:49:3c:60:17:32:d6:c2:25:8a:
5c:78:53:25:ea:6a:bb:15:d7:dd:c9:9f:61:c7:83:
99:da:f0:c2:db:81:5a:26:7b:13:1d:9e:f3:8e:9a:
f0:49:ba:47:e6:88:3c:36:6c:d8:d9:69:f7:67:c0:
26:f9:4c:9e:d1:39:ed:3d:c7:c8:89:7b:12:f5:f9:
e7:54:2d:50:ba:5a:09:2e:2d:b5:5d:14:86:7e:50:
45:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.108.0/22
IPv6:
2a0d:d1c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209582
Signature Algorithm: sha256WithRSAEncryption
76:11:f6:bc:6c:cf:cc:3b:cd:13:13:0f:39:f7:91:85:3e:99:
85:91:25:79:a8:95:f7:bc:84:8f:d7:b4:58:0c:3c:34:75:b3:
d1:b8:b9:74:6a:1c:42:b2:60:2e:fc:84:25:db:6d:ae:ba:8f:
87:78:c1:ed:c8:cf:3b:b7:f8:a8:80:6b:22:c3:3a:95:fc:b3:
43:9e:6c:0c:b8:70:85:e5:ad:da:61:f8:71:61:fe:fd:fd:6f:
22:43:0f:68:d7:64:a2:22:7a:7c:16:09:c6:10:f3:ad:f6:71:
29:fd:e5:c7:cf:72:71:e9:f5:38:eb:04:9e:11:9d:db:e6:ff:
d9:a3:56:04:9d:e8:78:9e:10:f4:50:b0:b9:9b:30:a6:fa:0b:
de:7d:db:5e:49:44:1e:56:75:ed:81:f9:f4:83:c5:4f:25:b1:
3c:26:d1:8f:d1:85:b6:dc:9a:f3:79:2f:49:3c:70:61:45:ef:
ff:4b:a2:76:34:75:f5:73:f8:3c:b9:3d:4f:b6:29:b1:3c:d9:
df:dc:7a:d3:8f:7e:9b:c7:ea:38:38:2a:4c:16:a0:26:55:e4:
0a:0a:85:ca:c3:24:01:55:cf:8d:7d:87:cc:72:9e:98:73:30:
35:92:71:2d:19:26:1f:4f:e3:a5:f8:45:74:81:f0:32:5f:1e:
98:d5:15:bf
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQkRXuAPfELK1cCAsgtlVibMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjhiNDI5MjJkMzg3YzU3OGZhNTc2OTI0ODdmMmExOTA2ODU4OWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRl3P/CKTKG0b6MfmhGKFAR1G9ob
rgZEBjTCsVId+MGwZkfiGAiJi1F4oOPEltKYkTIk/o5td/7p/OYDVzFqCKjfeaSG
X7sF7/NeGafHA0ScwCNkYiQD4JUidczO2EZmDXaeiO5kQxBMd+3LjQ2Yom5qf78w
lrKB/OZ5Xf6fCJxSCUhYhgOcU0yZfmlZGJQzfS67ibCcFGmdtNT9vpLbr7oOe8uT
aBUc7Z5JPGAXMtbCJYpceFMl6mq7FdfdyZ9hx4OZ2vDC24FaJnsTHZ7zjprwSbpH
5og8NmzY2Wn3Z8Am+Uye0TntPcfIiXsS9fnnVC1QuloJLi21XRSGflBFhwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFLaLQpItOHxXj6V2kkh/KhkGhYm6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VlLzMzNjE5
OC0zZTdiLTQ2MTUtYmNlYS00YTU0NWIxMTY4ODAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWUvMzM2MTk4
LTNlN2ItNDYxNS1iY2VhLTRhNTQ1YjExNjg4MC8xL3RvdENraTA0ZkZlUHBYYVNT
SDhxR1FhRmliby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCvL5sMA0EAgACMAcDBQMqDdHAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwMyrjANBgkqhkiG9w0BAQsFAAOCAQEAdhH2vGzPzDvN
ExMPOfeRhT6ZhZEleaiV97yEj9e0WAw8NHWz0bi5dGocQrJgLvyEJdttrrqPh3jB
7cjPO7f4qIBrIsM6lfyzQ55sDLhwheWt2mH4cWH+/f1vIkMPaNdkoiJ6fBYJxhDz
rfZxKf3lx89ycen1OOsEnhGd2+b/2aNWBJ3oeJ4Q9FCwuZswpvoL3n3bXklEHlZ1
7YH59IPFTyWxPCbRj9GFttya83kvSTxwYUXv/0uidjR19XP4PLk9T7YpsTzZ39x6
049+m8fqODgqTBagJlXkCgqFysMkAVXPjX2HzHKemHMwNZJxLRkmH0/jpfhFdIHw
Ml8emNUVvw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 03:56:25 2025 by rpki-client