Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer
File: TtMkzMCQuDGCmReur3ODTwg0Ss4.cer (raw, json)
Hash identifier: MT++WgKhUzbjZ3Lx++kPZ++Szu74xW76TyzSw6OJUH8=
Subject key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01963E73BE79ED0A7A1E87871AF8246398FB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 16 Apr 2025 11:54:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a10:da00::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:73:be:79:ed:0a:7a:1e:87:87:1a:f8:24:63:98:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 16 11:54:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ed324ccc090b831829917aeaf73834f08344ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:e9:ac:61:47:c0:15:84:3d:03:88:38:e0:
8f:94:64:73:dd:78:cb:cc:33:5e:1a:b5:b2:34:d6:
a1:b5:e4:55:54:aa:15:6c:f9:7d:32:a9:eb:6c:49:
ae:3a:dd:4c:8f:3b:95:69:74:a4:6f:5a:96:fe:b5:
c1:07:7e:6d:b2:49:11:b0:8c:f6:7e:9d:23:f9:a7:
2d:14:39:73:f2:7b:88:de:8c:d6:56:3b:65:0f:0a:
3e:87:f3:5e:97:a9:57:7c:0a:28:89:1c:74:46:a0:
ab:e8:37:80:59:61:89:0f:98:c7:45:03:f9:ee:88:
fe:4f:fe:df:3a:52:70:93:b4:b2:1b:83:cc:d9:88:
75:bc:83:eb:1e:05:b3:88:ba:33:5f:16:be:a5:99:
6d:a0:cc:dd:20:88:4a:3d:41:15:3d:b6:25:c0:06:
cb:6c:f1:fd:13:ba:6f:94:ba:c9:b4:55:95:b4:64:
b9:81:2b:06:76:26:a4:70:21:80:34:66:78:ce:52:
b8:64:40:19:b0:29:e6:9e:85:16:ed:13:29:b3:06:
49:5d:5c:c3:d8:cf:c1:07:0a:37:60:8b:69:48:b4:
81:74:3e:26:9b:cd:e5:43:4b:ce:91:1e:fa:24:a6:
4f:c2:69:64:b5:c6:e5:96:2f:5e:e7:20:66:1a:50:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:da00::/29
Signature Algorithm: sha256WithRSAEncryption
3b:b4:2b:7d:d0:e1:77:ba:61:2e:8e:ee:68:5a:7f:ae:0a:f2:
bf:93:52:96:3f:22:5e:c8:ab:e9:fb:df:ec:d1:12:16:c1:f9:
f1:a6:0b:5d:7e:8d:ed:10:62:46:14:51:98:10:cf:5f:38:9e:
44:a8:84:2f:c1:ee:b5:5d:b7:7b:b2:77:d0:4b:df:90:00:06:
5f:f3:56:f5:ff:66:66:79:18:34:95:6c:36:27:ed:be:da:fb:
4d:88:15:ca:72:24:39:d7:1c:9f:27:ff:09:a6:3d:a5:96:01:
cf:c2:57:f0:5f:75:c7:51:2b:73:01:9f:4f:3c:f7:01:77:32:
a9:e2:0a:55:31:ed:91:c7:1d:59:a2:8c:1b:db:76:41:9e:15:
9e:a3:97:d6:18:1d:76:2b:2b:8f:6c:a9:f6:50:76:0c:e8:f1:
71:5e:b8:1b:37:50:23:a4:fa:22:92:b4:ae:bc:3a:fb:f9:f7:
db:4c:f3:7f:6a:26:52:cb:47:d0:78:fb:dc:90:c8:c4:1f:01:
69:7b:12:f7:90:af:25:f4:ec:68:4a:57:53:37:23:53:19:a6:
b6:3c:db:cc:70:36:17:06:6d:00:a7:ea:54:b8:49:4f:21:94:
db:36:2a:9d:d6:71:1a:31:aa:86:00:01:5d:a5:53:a4:f0:72:
cc:a2:f4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:57:39 2025 by rpki-client