Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer
File: TDijBqN-6Hvr_3I2VT4NPLZyzRc.cer (raw, json)
Hash identifier: qi0C6YvJvXvjvERYV91HbN3Oy0Ct83mKQUKQ+6fatRg=
Subject key identifier: 4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196AF4A96641F63053C18BED7D07DA867D0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 08 May 2025 09:47:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.29.50.0/24
IP: 2a14:2880::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:4a:96:64:1f:63:05:3c:18:be:d7:d0:7d:a8:67:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 8 09:47:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c38a306a37ee87bebff7236553e0d3cb672cd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:39:50:ca:1e:ab:b4:66:eb:c6:4c:1c:cc:
aa:d9:fe:7a:94:3b:96:c1:0b:6b:5e:3e:0e:5d:1c:
16:63:1b:8b:54:a3:0a:77:27:75:a7:d2:4a:a6:9b:
b9:b1:d0:11:ef:89:a9:55:8d:a3:98:9e:1a:bc:af:
80:53:70:e1:1f:35:73:75:b7:29:ad:19:0e:6a:a3:
25:44:22:35:29:a6:11:70:ab:a3:67:c2:ce:0d:50:
1f:81:0d:56:a5:3a:af:c8:a9:bc:24:f8:31:19:4f:
50:f2:b0:a5:3d:00:bb:52:05:55:2c:5a:0b:a7:f4:
b7:c8:af:46:b6:1f:2d:94:d7:f1:0a:5f:13:c8:c0:
86:a5:21:0a:6d:35:b1:1d:26:79:ec:f6:0b:03:5b:
3f:c8:8c:f4:29:2a:f0:22:52:44:38:2c:d6:e5:45:
fc:6f:13:ae:b9:75:38:7c:1e:72:33:da:8a:24:5f:
dc:d4:b6:fe:c9:16:a1:b9:5e:64:85:94:53:43:2f:
95:6f:08:59:93:25:2c:75:d5:0b:c6:03:25:5a:cd:
1c:d6:1b:08:d4:fa:f0:13:20:02:9b:12:19:fb:1e:
93:0b:92:2d:b0:a0:a2:15:1d:e3:b1:d9:28:f3:d5:
09:9d:18:5b:eb:97:7b:a7:9a:5f:a8:09:74:37:a6:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:38:A3:06:A3:7E:E8:7B:EB:FF:72:36:55:3E:0D:3C:B6:72:CD:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/08cd93-0876-43fd-92c0-b863c0a98b2d/1/TDijBqN-6Hvr_3I2VT4NPLZyzRc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.50.0/24
IPv6:
2a14:2880::/29
Signature Algorithm: sha256WithRSAEncryption
2b:d4:5f:b4:3b:b7:66:a8:57:2c:6d:aa:e5:1a:3b:60:4e:ca:
f5:cf:fe:04:55:cb:a0:63:82:18:d6:19:66:65:9a:ee:47:e7:
06:88:8c:34:59:03:23:d0:e8:34:b7:81:36:19:35:31:12:2f:
e3:72:ce:5d:e6:61:74:b0:97:4a:1e:9f:4f:9b:13:1c:64:08:
19:e7:53:da:5f:fe:ed:03:70:bc:2f:2a:13:de:0f:99:7e:c3:
e5:a6:03:90:6b:7c:80:39:a3:98:10:e2:f6:c0:e6:61:03:79:
1f:71:40:7e:62:c2:76:4c:e6:3d:ef:c1:74:d9:d9:57:8d:52:
ea:79:5d:2b:f9:59:38:a6:a2:53:4a:71:b3:8e:c8:0a:e8:b4:
03:e9:5c:04:64:00:a0:52:7b:d9:b0:61:ea:a9:c6:0b:33:51:
55:f4:81:d0:5f:4e:9b:ba:26:8a:8e:c0:15:42:10:f9:66:bd:
20:72:f4:10:c4:b4:1a:1e:77:e1:88:99:c1:5c:72:d6:c8:9b:
a4:25:de:04:83:da:9c:15:8f:f6:3f:b0:9f:eb:38:69:ed:95:
c7:7e:bd:9a:07:40:ff:8c:26:a7:70:ac:52:22:0f:ce:83:75:
63:c7:29:15:75:9e:e6:71:0d:5b:f6:59:c9:cb:c3:6b:cd:52:
28:57:b7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:20:26 2025 by rpki-client