Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0HCWDtmg2hybfiRX6ry2YEeNCK4.cer
File: 0HCWDtmg2hybfiRX6ry2YEeNCK4.cer (raw, json)
Hash identifier: Ae+zAtttuChffgRoKBXIauHhPXccYsW9YwT5WybKnFI=
Subject key identifier: D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01982BF35A6B8152BF7FA414FC018C732AAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 21 Jul 2025 07:47:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 188.92.28.0/24
IP: 2a0a:c140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2b:f3:5a:6b:81:52:bf:7f:a4:14:fc:01:8c:73:2a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 21 07:47:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d070960ed9a0da1c9b7e2457eabcb660478d08ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:f1:e3:0e:94:ab:86:96:b2:a3:af:95:76:
87:f6:6c:e4:96:33:33:5b:5e:9c:f6:36:2c:2c:61:
6c:7d:ae:e2:bb:39:c9:7e:69:04:57:68:a5:0c:f5:
f0:6a:0b:06:81:80:5b:fb:8e:3a:e7:5d:1c:2f:c4:
31:c8:fd:73:c1:71:75:ca:9d:be:46:3c:7d:97:ad:
e6:57:1e:37:c8:db:45:f7:70:cc:a1:fb:c4:5e:c2:
8a:da:3e:c4:c8:9d:8c:89:22:48:57:fd:1f:d1:93:
3c:2a:bc:f3:f9:29:2a:f8:d6:7d:35:65:4f:53:ff:
bf:d9:9e:52:4e:61:c0:ff:4b:0c:3e:e5:cf:b6:3c:
05:df:9c:80:2b:30:71:db:02:cd:ca:1a:be:c8:a5:
ae:10:db:67:34:e1:dc:2f:22:59:cb:84:50:6f:b0:
f7:c2:f5:92:1a:79:07:e7:a0:f8:8c:be:05:65:6a:
ea:85:1b:cd:d2:0e:e1:71:8d:60:88:51:44:91:60:
4c:c5:78:cb:2a:f2:72:a6:e2:c5:85:e9:27:d8:1f:
ed:fd:70:38:ab:ec:f9:6e:48:3b:5e:f4:2d:94:66:
13:17:fd:7f:cd:bb:2b:73:fa:8f:52:a6:eb:f6:b3:
01:19:ff:15:99:fe:38:5d:e0:0f:69:ac:10:15:84:
36:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:70:96:0E:D9:A0:DA:1C:9B:7E:24:57:EA:BC:B6:60:47:8D:08:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/03558e-688f-4e1c-a66f-6eefda1108ad/1/0HCWDtmg2hybfiRX6ry2YEeNCK4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.92.28.0/24
IPv6:
2a0a:c140::/29
Signature Algorithm: sha256WithRSAEncryption
9f:75:be:23:fe:b6:da:2b:86:ab:19:1a:a5:de:15:8a:e7:a2:
17:b8:73:fa:f4:07:1b:eb:a4:79:38:10:85:de:9f:4f:79:b8:
c1:b9:f1:d6:2e:35:46:46:f3:ce:49:a0:e0:de:5d:00:4e:9b:
5b:37:ac:73:8b:e9:ef:a9:48:45:5e:e2:11:a8:b0:6e:2c:d4:
a5:e4:a9:ad:fb:59:05:99:87:61:d6:fc:c1:a9:3b:cd:28:78:
a3:58:98:c1:8a:f1:05:e2:4a:6e:2d:79:ec:34:7b:d8:ed:3a:
72:4c:22:24:b3:41:fa:f3:ab:58:b4:80:fe:2a:c8:88:98:06:
93:c2:86:9d:a9:d2:78:1f:b4:11:e2:c7:eb:75:6c:31:3b:0d:
79:af:72:22:4c:28:7f:a2:41:6f:a0:97:0d:75:2b:1a:f1:16:
71:8c:ac:39:93:9f:78:cd:98:eb:1e:5e:b4:8c:a3:ac:67:06:
1c:9a:ba:50:b5:1e:3d:9c:b2:ee:85:a5:9d:e0:88:cb:a8:ff:
c2:f8:2e:53:61:6e:af:f0:87:6f:05:88:21:89:bd:3d:61:1f:
fd:0a:1c:4a:53:61:3d:68:40:fb:7b:3d:0f:b2:6c:a4:b0:f7:
c7:9b:e5:66:e3:fb:43:76:a5:17:e9:69:4f:9c:76:76:56:71:
0b:c5:7c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:16:09 2025 by rpki-client