Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.cer (raw, json)
Hash identifier: fYOyEwchEdyLNpQRxOa82z4q7lL1jYJdTSLig8ACm5A=
Subject key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019634901CD5C281C288A8EEC9C848891F84
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 14 Apr 2025 13:49:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25369
AS: 49999
AS: 52167
AS: 58325
AS: 200039
IP: 5.226.136.0/21
IP: 31.14.102.0/24
IP: 31.14.254.0/24
IP: 37.10.113.0 -- 37.10.114.255
IP: 46.102.155.0/24
IP: 46.231.160.0/21
IP: 46.247.142.0/23
IP: 64.239.236.0/22
IP: 77.81.102.0/24
IP: 77.81.124.0/22
IP: 77.81.191.0/24
IP: 79.139.84.0/22
IP: 80.240.108.0/23
IP: 81.19.208.0/20
IP: 82.97.192.0/23
IP: 84.247.0.0/24
IP: 84.247.40.0/22
IP: 85.204.70.0/24
IP: 86.54.136.0/22
IP: 86.104.20.0/22
IP: 86.104.248.0/22
IP: 86.106.89.0/24
IP: 86.106.112.0/24
IP: 86.106.135.0/24
IP: 86.106.157.0 -- 86.106.158.255
IP: 86.107.241.0/24
IP: 89.21.64.0/22
IP: 89.32.127.0/24
IP: 89.34.96.0/22
IP: 89.35.25.0/24
IP: 89.35.28.0/22
IP: 89.37.64.0/22
IP: 89.37.172.0/22
IP: 89.38.68.0/23
IP: 89.40.212.0/24
IP: 89.46.222.0/23
IP: 89.46.248.0/22
IP: 93.113.175.0/24
IP: 93.114.83.0/24
IP: 93.114.129.0/24
IP: 93.118.40.0/22
IP: 94.177.17.0/24
IP: 109.69.104.0/21
IP: 109.70.144.0/21
IP: 109.230.203.0/24
IP: 109.230.209.0/24
IP: 109.230.215.0/24
IP: 109.230.218.0/24
IP: 109.230.220.0/24
IP: 128.127.148.0/22
IP: 134.255.243.0/24
IP: 176.223.172.0/22
IP: 178.239.160.0/20
IP: 185.3.236.0/22
IP: 185.16.204.0/22
IP: 185.28.252.0/22
IP: 185.38.148.0/22
IP: 185.44.76.0/22
IP: 185.61.156.0/22
IP: 185.114.224.0/24
IP: 185.121.136.0/22
IP: 185.125.204.0/22
IP: 185.134.20.0/22
IP: 185.137.36.0/22
IP: 185.158.240.0/22
IP: 185.200.204.0/22
IP: 185.216.144.0/22
IP: 185.223.232.0/22
IP: 185.242.80.0/22
IP: 188.212.154.0/24
IP: 188.240.56.0/21
IP: 188.240.71.0/24
IP: 188.241.120.0/24
IP: 188.241.144.0/24
IP: 188.241.156.0/23
IP: 188.241.246.0/24
IP: 193.32.208.0/22
IP: 193.124.20.0/23
IP: 193.176.28.0/22
IP: 194.50.234.0/23
IP: 194.50.250.0/23
IP: 194.88.96.0/21
IP: 195.20.108.0/23
IP: 195.140.212.0/22
IP: 195.206.165.0 -- 195.206.167.255
IP: 195.206.169.0 -- 195.206.171.255
IP: 195.206.180.0/22
IP: 195.234.124.0/23
IP: 195.234.127.0/24
IP: 212.237.224.0/22
IP: 213.166.84.0/22
IP: 217.146.80.0/20
IP: 2a00:1a30::/32
IP: 2a01:4020::/32
IP: 2a0b:b840::/29
IP: 2a0d:7440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:34:90:1c:d5:c2:81:c2:88:a8:ee:c9:c8:48:89:1f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 14 13:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:16:6d:97:9b:a4:24:de:4c:7b:53:5e:79:45:
0c:39:25:d0:06:16:e0:16:c2:73:ff:0c:3d:46:c5:
0c:f3:4e:b2:b0:83:27:62:5a:1c:e7:ee:04:36:dc:
c5:4b:32:ba:c1:f0:3d:0b:9a:45:69:32:fd:57:c4:
3f:9a:27:7b:10:ab:18:02:75:31:58:35:68:ce:e1:
9f:c5:2c:d2:f9:ff:eb:ed:66:b5:39:ea:3f:33:67:
cb:b7:cc:a1:88:bc:90:b0:5b:95:15:72:ae:b1:4a:
8a:3c:f3:93:46:0b:23:02:ef:55:93:48:69:98:77:
97:2e:7f:ac:eb:4b:ca:8b:c4:0e:15:fd:79:2d:9c:
9a:fc:52:3b:ec:3d:f5:d1:19:70:c8:50:bf:10:ca:
17:9c:c6:c6:98:0b:0b:26:75:92:b7:34:e9:2b:c9:
2c:40:0f:11:e1:aa:26:dc:da:59:f0:a3:c9:87:76:
17:a3:05:23:d0:50:eb:3e:ca:18:af:31:2a:f6:0d:
23:7d:81:88:3f:5e:fc:6d:5a:ce:70:f3:06:e6:ca:
73:d3:6e:74:b7:25:94:e9:95:13:78:f4:72:e3:19:
d9:af:7a:b2:8a:8a:77:2d:c5:e5:58:8a:2f:c6:71:
79:b9:5c:f3:55:67:97:ed:9b:75:7b:b5:92:66:a5:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.136.0/21
31.14.102.0/24
31.14.254.0/24
37.10.113.0-37.10.114.255
46.102.155.0/24
46.231.160.0/21
46.247.142.0/23
64.239.236.0/22
77.81.102.0/24
77.81.124.0/22
77.81.191.0/24
79.139.84.0/22
80.240.108.0/23
81.19.208.0/20
82.97.192.0/23
84.247.0.0/24
84.247.40.0/22
85.204.70.0/24
86.54.136.0/22
86.104.20.0/22
86.104.248.0/22
86.106.89.0/24
86.106.112.0/24
86.106.135.0/24
86.106.157.0-86.106.158.255
86.107.241.0/24
89.21.64.0/22
89.32.127.0/24
89.34.96.0/22
89.35.25.0/24
89.35.28.0/22
89.37.64.0/22
89.37.172.0/22
89.38.68.0/23
89.40.212.0/24
89.46.222.0/23
89.46.248.0/22
93.113.175.0/24
93.114.83.0/24
93.114.129.0/24
93.118.40.0/22
94.177.17.0/24
109.69.104.0/21
109.70.144.0/21
109.230.203.0/24
109.230.209.0/24
109.230.215.0/24
109.230.218.0/24
109.230.220.0/24
128.127.148.0/22
134.255.243.0/24
176.223.172.0/22
178.239.160.0/20
185.3.236.0/22
185.16.204.0/22
185.28.252.0/22
185.38.148.0/22
185.44.76.0/22
185.61.156.0/22
185.114.224.0/24
185.121.136.0/22
185.125.204.0/22
185.134.20.0/22
185.137.36.0/22
185.158.240.0/22
185.200.204.0/22
185.216.144.0/22
185.223.232.0/22
185.242.80.0/22
188.212.154.0/24
188.240.56.0/21
188.240.71.0/24
188.241.120.0/24
188.241.144.0/24
188.241.156.0/23
188.241.246.0/24
193.32.208.0/22
193.124.20.0/23
193.176.28.0/22
194.50.234.0/23
194.50.250.0/23
194.88.96.0/21
195.20.108.0/23
195.140.212.0/22
195.206.165.0-195.206.167.255
195.206.169.0-195.206.171.255
195.206.180.0/22
195.234.124.0/23
195.234.127.0/24
212.237.224.0/22
213.166.84.0/22
217.146.80.0/20
IPv6:
2a00:1a30::/32
2a01:4020::/32
2a0b:b840::/29
2a0d:7440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25369
49999
52167
58325
200039
Signature Algorithm: sha256WithRSAEncryption
66:24:09:d1:28:bc:16:2f:1d:8a:5b:48:7f:da:36:98:bf:05:
62:96:6f:29:14:6c:5a:1f:13:2c:49:fb:8b:5e:2f:b4:f2:26:
df:79:65:94:63:6b:39:a1:bb:2e:fa:d3:59:96:f4:6c:80:f5:
7c:ef:44:b9:2e:39:c9:0f:ad:27:65:e1:be:1b:21:07:02:36:
4b:cb:e8:7f:38:8a:1e:db:20:b9:7c:62:d0:ef:20:09:27:77:
d9:bb:40:13:08:f2:c3:36:70:73:58:e8:62:80:b3:73:f3:87:
2d:13:5c:12:dd:73:ff:3a:6e:15:07:bc:e9:0a:01:e6:e5:d4:
e0:42:d9:67:49:60:2a:63:40:6e:16:23:74:68:f5:60:af:ca:
bb:46:7f:89:f8:cf:fd:18:b7:b8:c2:65:46:9a:a1:b2:2a:c4:
19:68:23:8a:88:5b:39:8f:94:e8:ea:41:38:23:b5:c6:c2:2f:
dd:5d:e6:19:79:7f:62:5a:c3:be:34:9e:da:6b:21:ac:e6:fa:
71:6d:23:6f:25:89:d6:35:f2:24:c9:ac:5c:e8:74:2e:aa:f6:
4d:95:d3:46:ed:36:88:ce:cb:03:e3:a4:ca:ef:4c:67:e3:33:
21:e5:76:5e:2b:e4:f7:7e:51:46:ff:b4:50:1d:58:8c:ec:97:
d0:19:cb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:32:47 2025 by rpki-client