Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TdGNc77T2_iTqF8BD8cfd8KAecA.cer
File: TdGNc77T2_iTqF8BD8cfd8KAecA.cer (raw, json)
Hash identifier: Vr0Dmlf6Fb+XZdzCm6wODPCoJiR6sJq/LQj+7u1NTqI=
Subject key identifier: 4D:D1:8D:73:BE:D3:DB:F8:93:A8:5F:01:0F:C7:1F:77:C2:80:79:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01992DA183057A4631B1AC9E297EF93E24AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0d1-9473-4a0f-b4a9-ce47e5b06486/1/TdGNc77T2_iTqF8BD8cfd8KAecA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0d1-9473-4a0f-b4a9-ce47e5b06486/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Sep 2025 08:39:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212503
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2d:a1:83:05:7a:46:31:b1:ac:9e:29:7e:f9:3e:24:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 9 08:39:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dd18d73bed3dbf893a85f010fc71f77c28079c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1d:7d:97:16:3d:e2:37:76:60:27:9b:d5:e0:
84:8f:eb:bb:2c:35:8c:13:6c:cf:41:7f:01:1e:4e:
61:b5:f3:5e:eb:96:19:dc:93:e8:e1:df:e7:d7:ca:
85:3a:54:76:f9:46:51:d8:c2:ca:63:5b:ed:af:c1:
53:05:18:19:8d:ef:b7:9a:b2:6f:4b:40:a0:f1:7a:
32:73:19:9b:c4:a6:33:27:ea:99:9b:30:0b:3a:99:
a7:11:72:d2:ac:7b:3c:fc:d5:6c:30:db:12:98:fc:
d6:da:cd:25:e0:3f:4e:8d:26:e1:24:74:69:d4:6b:
12:9f:73:41:7c:de:9f:9c:f3:fa:74:3c:68:db:14:
91:7b:a3:89:6a:3c:44:a3:1e:5a:d6:62:76:79:5c:
78:1f:60:94:7f:2f:67:4a:2a:93:98:7d:dc:c2:db:
a4:a0:89:a1:93:d8:08:38:e2:f5:00:e6:f1:08:5a:
03:c8:76:f8:dd:4c:13:20:17:a9:81:e7:78:06:12:
68:e8:3c:02:7b:a1:32:98:22:e4:3e:03:16:6d:fe:
ed:63:49:35:53:8c:36:d2:2a:9a:67:f4:ff:89:0c:
52:22:79:ec:4c:69:e9:5a:52:a9:b5:90:bf:dc:dd:
c7:42:f5:17:3d:11:9a:6b:a0:3f:ae:57:ed:3b:62:
ae:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D1:8D:73:BE:D3:DB:F8:93:A8:5F:01:0F:C7:1F:77:C2:80:79:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0d1-9473-4a0f-b4a9-ce47e5b06486/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/26c0d1-9473-4a0f-b4a9-ce47e5b06486/1/TdGNc77T2_iTqF8BD8cfd8KAecA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212503
Signature Algorithm: sha256WithRSAEncryption
1b:bd:a5:9a:ed:6e:99:05:8f:46:45:12:f1:3d:fa:f8:de:1c:
fd:4e:82:03:2e:29:d0:67:d9:a0:12:fc:8b:bd:07:6d:2d:b3:
52:78:46:26:bd:34:4e:34:50:14:b8:60:49:27:3b:d4:0a:93:
87:52:62:02:54:32:f8:51:ef:b1:b2:e0:ca:3e:40:6b:02:27:
c8:d4:f7:c6:98:8c:64:a9:2c:ef:e8:36:5c:49:c6:c4:e7:71:
ca:01:6c:55:09:48:72:8b:4c:9c:78:2b:33:77:06:ee:24:8e:
8b:e3:d0:e5:82:94:5b:48:dc:d1:fb:30:70:87:b7:39:bc:b6:
80:5c:b3:5d:73:9e:97:6a:71:92:f8:63:5b:31:79:47:19:be:
74:b7:6c:c5:1e:9d:f0:a5:71:fb:e6:01:46:2e:0e:7d:11:5f:
06:bb:77:45:67:58:24:a9:95:70:de:7a:c7:6e:a5:4d:53:c8:
e4:77:3f:26:3b:91:6b:c9:2d:d0:c8:23:d7:58:55:6c:40:9b:
c0:97:bb:c8:06:e6:9d:52:a1:fc:4c:a5:16:3b:87:f3:54:1e:
87:8e:76:6e:0e:56:2c:d7:43:b4:aa:8c:5a:84:b6:55:96:68:
3c:b0:72:6a:28:d9:32:f5:b7:93:90:4a:52:83:c8:3f:38:5f:
fd:9f:f9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:29:05 2025 by rpki-client