Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer
File: tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer (raw, json)
Hash identifier: G8LxmNHnpjxfva9nPp+bW64/zsH8f+LZjuNQlPDiJIk=
Subject key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198790D17AF0E51C084D8DED938976F89A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 05 Aug 2025 07:05:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 3255
AS: 51556
AS: 61356
IP: 185.17.124.0/22
IP: 194.44.0.0/16
IP: 213.174.0.0/19
IP: 2a00:fc00::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:0d:17:af:0e:51:c0:84:d8:de:d9:38:97:6f:89:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 5 07:05:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6f3db35659133315d2fcf93058dce350a4cb17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cd:69:93:33:dc:52:64:41:93:ee:e8:0a:b8:
76:91:a4:4b:17:48:b5:77:75:67:52:44:ff:66:34:
45:3a:df:62:d6:29:e7:3d:fc:49:20:29:35:54:94:
79:9a:54:06:e8:b0:d1:47:24:2f:92:ba:ee:ca:a6:
5a:aa:1c:17:3e:d6:d0:82:a3:cc:40:7c:88:77:16:
46:58:f7:1c:6d:fa:56:4d:ec:9e:ae:b5:b2:19:44:
10:19:ba:45:eb:34:ad:03:4b:7a:1b:65:de:a2:ff:
ec:cd:6f:2f:02:8e:0c:58:e2:c8:54:7d:bc:cc:a1:
27:db:7f:6c:42:1e:6e:66:64:1e:ce:2b:07:39:07:
4c:f4:31:0f:fc:4d:a0:83:06:31:bf:04:70:73:f1:
b5:d6:a4:65:54:34:7d:73:32:8b:f2:3f:f5:5b:5d:
96:d4:b6:62:3b:33:83:e4:43:56:d0:a1:74:4e:b4:
ec:92:05:76:b8:97:88:40:49:83:3b:5f:42:53:16:
70:89:6f:34:0e:71:f3:bc:85:4e:76:a7:72:85:e7:
1b:52:08:8d:cb:fe:75:fe:85:a0:a4:c0:d1:a6:df:
f7:9a:1e:24:54:cb:d6:c0:24:df:5a:7c:39:d3:9a:
dd:88:c5:8f:62:b6:38:59:59:b3:e5:94:db:b8:93:
45:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.17.124.0/22
194.44.0.0/16
213.174.0.0/19
IPv6:
2a00:fc00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
3255
51556
61356
Signature Algorithm: sha256WithRSAEncryption
b1:93:81:fc:4a:04:a6:2f:e2:7b:94:5c:13:8a:1d:6e:a8:3d:
11:5d:bb:c5:63:44:83:d2:5e:ec:d4:22:40:63:50:9c:01:3f:
09:c5:d2:12:8d:90:8c:07:7a:b8:07:ca:a2:27:a0:3c:56:9f:
95:72:e6:00:a7:5a:f1:ec:80:97:82:7e:a1:71:d7:d8:d8:41:
b2:79:42:68:39:47:71:2b:49:d3:20:5b:5e:81:4d:07:f5:9a:
65:a9:0a:63:78:43:97:51:67:13:9e:71:ec:d4:65:48:d9:1b:
df:6a:9a:02:12:63:01:a7:16:b8:3b:3e:5d:a3:9a:d1:2d:81:
bb:29:40:8c:af:be:18:5d:6d:e0:9b:de:2f:85:b3:e6:75:9d:
68:78:07:cf:f3:c1:a0:69:e1:a7:ec:2c:3f:bc:3a:3d:84:a6:
d3:5e:b8:1f:c6:14:1e:c8:de:7a:c0:48:fe:f3:2c:fa:e0:3e:
7b:47:5b:df:0f:06:58:91:76:1f:8c:06:38:1e:8b:1d:4d:f1:
04:6e:ef:9f:60:d3:17:a5:6e:9c:16:c3:35:8b:a9:17:af:17:
a5:1d:93:8e:06:91:10:d5:c5:03:16:8c:fc:91:4c:6a:b6:2e:
81:6b:40:f7:4e:a2:44:ab:e9:bc:b8:30:b3:97:f1:bd:ff:c0:
a2:a6:00:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:11:04 2025 by rpki-client