Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer
File: TOlmOD4HjvQLXtgi5uKjAbBRDs4.cer (raw, json)
Hash identifier: DqPJmRv6X7qj4tmM7SlQeZdAd8i1+SdaDfNiujafHzI=
Subject key identifier: 4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01985F859A381A7956269EB5235EDF4BD49A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 31 Jul 2025 08:07:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.213.118.0/23
IP: 2001:67c:298::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5f:85:9a:38:1a:79:56:26:9e:b5:23:5e:df:4b:d4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 31 08:07:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ce966383e078ef40b5ed822e6e2a301b0510ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:6f:51:31:76:a0:d8:d0:a4:77:ac:ba:e6:
bd:78:50:d9:8c:38:03:ff:3e:8e:bf:43:2e:b2:8e:
87:fa:68:38:68:5d:03:38:1d:d3:49:86:1e:95:f0:
01:c2:ff:d8:18:d1:ef:bd:bc:f0:c4:98:b6:5f:43:
d6:e7:e2:ee:04:cb:2a:e6:0c:ca:05:e5:7c:f0:7a:
f9:89:6f:8e:66:5c:af:14:4b:dc:dd:2e:f3:74:82:
c5:89:74:37:d4:8d:46:0e:cf:19:c9:f1:d4:ad:7a:
a3:8f:07:8d:57:b5:e1:12:39:94:eb:ca:98:a7:b2:
d3:d2:02:98:07:58:8c:9b:c5:d5:f5:44:77:3a:b2:
b6:45:78:9c:d8:68:05:89:0a:13:f0:20:4b:fb:c5:
63:78:15:ad:04:4e:0e:c6:4a:d8:de:58:0f:2f:d4:
6d:0b:ca:4d:43:32:f0:2b:2f:13:13:7b:88:88:96:
5e:39:d7:08:f6:46:26:9e:99:1d:25:80:57:4a:dc:
67:7a:13:a6:87:ee:a8:06:93:9a:c9:fa:c9:55:3e:
24:0d:80:43:86:8d:41:07:de:a4:a2:ee:f6:fd:f0:
a4:d9:91:9e:d7:d8:3b:9c:41:29:8c:fc:0c:a5:12:
9a:ea:34:56:0b:c3:45:a0:5c:6e:17:da:f9:80:d2:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E9:66:38:3E:07:8E:F4:0B:5E:D8:22:E6:E2:A3:01:B0:51:0E:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/66bb8b-cc0d-4d33-8b47-3723d6e6b6ef/1/TOlmOD4HjvQLXtgi5uKjAbBRDs4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.118.0/23
IPv6:
2001:67c:298::/48
Signature Algorithm: sha256WithRSAEncryption
36:55:cc:0c:78:6e:f0:38:9f:63:49:29:b7:19:fa:24:53:4d:
d6:ce:b3:54:e9:49:b3:72:09:3b:8a:e7:7e:a4:9f:d9:47:fd:
c9:52:d6:5b:61:f5:a0:34:61:12:81:b8:6d:1a:cd:2f:61:35:
08:de:dd:15:99:10:22:c1:65:e3:a6:c8:d4:a8:3f:70:0c:e0:
4f:ec:6a:50:2b:b5:ed:96:9f:07:22:06:fa:93:ce:6c:da:10:
b4:4f:98:e6:36:d3:6c:c0:95:62:39:8c:e5:ba:91:3b:f8:c3:
86:9d:51:77:40:f7:5a:3d:ca:f9:a6:5d:70:a7:87:ac:f5:8b:
85:d6:07:94:8d:15:79:48:a3:8a:75:e1:5a:d1:83:61:db:73:
51:6e:6c:3d:0a:05:58:1d:08:5a:a3:da:ef:10:36:20:34:cd:
a6:e2:4b:5d:a3:64:91:e4:54:1e:34:ef:e9:9e:66:bf:07:98:
08:d4:57:5d:67:15:81:a6:87:1b:15:41:35:71:47:d2:4e:56:
de:2e:cd:f5:92:71:53:39:16:c5:d4:3f:55:d2:54:a6:8d:2b:
6d:b4:1c:af:f7:87:16:a7:bb:bf:af:03:21:74:e4:f5:59:37:
da:1f:8e:18:89:31:b2:f9:ed:c2:9f:0c:92:f8:2d:86:b0:1d:
0d:50:06:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:48:36 2025 by rpki-client