Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer
File: T0n-B0Y1HIfDQYrNOYbnYoxFh2c.cer (raw, json)
Hash identifier: 6ct31t7iuHzQFxy1HCIWLDRoriKxqPJrbW1CNYtPdYI=
Subject key identifier: 4F:49:FE:07:46:35:1C:87:C3:41:8A:CD:39:86:E7:62:8C:45:87:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01975AAD1EB84B2EDCF8B900429CBD5CC304
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 10 Jun 2025 16:29:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207126
IP: 2001:678:10a8::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:ad:1e:b8:4b:2e:dc:f8:b9:00:42:9c:bd:5c:c3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 10 16:29:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f49fe0746351c87c3418acd3986e7628c458767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:5c:24:63:ac:55:6b:ab:49:b5:3e:3b:aa:
19:df:a5:e5:b6:35:fe:be:e2:47:c1:c0:35:d4:28:
82:f1:2d:eb:39:bd:ab:c1:e3:58:c6:58:90:84:8c:
86:e8:59:f5:90:76:f9:e5:80:35:ec:1c:7d:b5:dc:
34:f7:e8:73:f9:56:9e:bf:ad:ad:aa:1a:15:13:99:
6b:de:89:a5:ec:01:e6:62:c3:74:06:3c:68:8d:dd:
45:f1:ee:a1:22:e7:e8:32:e3:72:0e:e5:3d:49:56:
fa:ed:ab:b9:20:91:ea:d6:99:26:1c:d2:32:47:a4:
c9:a6:d2:b4:31:9f:72:63:6f:ea:db:63:c6:3e:a9:
96:b2:02:2d:a5:4d:6d:36:ca:fa:e8:22:ac:fc:f6:
48:2f:f7:55:f5:f4:b5:8e:80:f1:cf:3d:69:c3:36:
94:f5:67:43:2f:2a:cd:05:aa:58:1a:25:02:3a:08:
95:54:0e:c9:d0:b1:13:69:95:26:98:2f:7d:76:37:
13:4a:6c:c9:53:99:ca:c1:bd:6a:71:c4:50:21:15:
e5:e7:61:fa:c6:20:69:6d:1b:8e:7d:1b:90:e0:0f:
5e:6e:37:b3:9a:01:bb:eb:43:66:d8:6f:e6:06:d3:
8e:15:51:03:42:37:92:09:10:3b:98:65:ce:56:0b:
ff:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:49:FE:07:46:35:1C:87:C3:41:8A:CD:39:86:E7:62:8C:45:87:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/20e95b-af0c-4796-abe2-e7cc87023961/1/T0n-B0Y1HIfDQYrNOYbnYoxFh2c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:10a8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207126
Signature Algorithm: sha256WithRSAEncryption
0c:65:91:9c:94:79:94:c0:2b:ce:b3:8e:08:de:ca:f5:3a:80:
56:7b:b5:98:a2:77:78:8b:5c:71:e0:58:b4:14:3b:61:32:24:
97:5b:a5:d5:95:5e:a5:bc:e3:cd:c9:16:db:6c:8c:d2:b7:1e:
c2:44:87:06:1d:26:62:b2:df:e6:d4:88:41:03:0a:23:23:d9:
78:7e:5a:9a:ef:eb:0d:93:4d:a2:63:16:7a:f7:94:70:d8:42:
7d:30:49:69:da:b6:0d:a5:3f:66:c7:84:b8:76:44:5c:f9:7c:
62:df:07:fe:6d:70:8a:22:1e:6d:02:70:56:c2:0c:54:c5:f8:
27:67:e4:3a:cf:7a:bc:5d:d9:32:ec:f0:ff:ef:10:b1:10:7d:
7e:bd:13:bb:9d:3e:a4:cc:d3:c9:4d:a9:04:67:9f:db:3d:ff:
f3:ce:a9:17:7f:fd:50:63:54:7a:14:6f:e7:5f:33:89:56:a8:
0b:aa:26:37:b9:27:3d:28:08:46:27:12:fc:8b:a5:39:f9:d9:
7b:a0:3c:e7:49:be:f8:ee:31:d4:58:05:b1:94:26:94:61:06:
17:02:03:a5:ae:59:78:23:7e:1e:45:ff:6c:f2:90:c8:5b:7b:
cc:c5:9c:30:a9:d9:fb:02:24:e5:24:b5:43:1e:dd:65:a2:e9:
e7:49:41:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:30 2025 by rpki-client