Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
File: sHplogTjx5n7GDuevkc2L6fP6MQ.cer (raw, json)
Hash identifier: Y2shCDtnicBwOFDrLdZ2NxHC38zTwEhtrC2A0DujKuk=
Subject key identifier: B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197C63892D214E3784D1038106AE7117D0C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 01 Jul 2025 13:41:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a05:bcc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:38:92:d2:14:e3:78:4d:10:38:10:6a:e7:11:7d:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 1 13:41:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:5a:23:29:42:a1:ea:32:33:34:61:e9:47:
76:c2:74:81:a2:7f:88:4a:ff:ac:79:fa:2e:9e:28:
13:03:cc:2c:40:60:cd:a4:ac:89:ce:bb:fc:fd:b0:
a7:31:c4:7e:0d:5c:b5:6b:24:f7:59:37:8d:43:84:
1c:fc:ad:b3:f5:a8:87:b7:f9:45:82:ea:04:fd:e1:
d6:5f:f8:3d:23:4e:9e:e2:b7:d7:eb:c2:ec:bd:16:
2c:d2:6b:1f:4d:33:ec:62:0b:31:ba:2b:d1:21:f0:
18:ad:d7:d5:17:93:6d:96:37:34:7a:78:c3:76:8b:
d0:71:0c:72:1d:b0:2d:6e:ca:6a:d5:34:e7:0c:3f:
ce:d6:9c:16:eb:ac:7b:91:12:d3:6a:89:90:06:5e:
dc:1f:b0:e6:ff:08:78:83:85:15:8b:d7:a8:5e:b5:
e0:d8:18:3f:19:26:24:5b:01:31:71:44:6b:33:2b:
9b:30:c9:d6:97:f9:f9:b0:5b:50:07:8c:34:f4:06:
7d:33:19:f9:82:a0:c2:23:81:39:2c:75:c1:fa:c7:
d8:45:c8:29:db:55:83:36:d3:cf:f2:19:b4:66:53:
2e:68:ce:55:fa:91:54:8d:7e:ae:04:c6:d4:36:7a:
0f:db:91:95:24:c7:63:a2:eb:be:6a:a2:4e:b2:28:
93:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:bcc0::/29
Signature Algorithm: sha256WithRSAEncryption
57:ad:50:99:af:b9:86:cf:cf:a1:4e:64:4e:d2:e8:ad:ff:e0:
97:a3:aa:10:12:b0:3e:28:65:1a:81:98:1a:4e:93:e0:0b:74:
7e:9e:5e:d9:9a:42:1a:51:88:c7:21:72:b4:34:94:11:7f:bb:
f8:6d:0e:4a:22:1f:e1:3e:ae:a1:4a:43:ae:3e:c2:1d:11:c0:
4c:ee:3e:58:78:fc:c0:8e:83:c4:9f:2b:b1:cd:96:91:99:0f:
30:9f:84:e4:69:5a:73:dc:e8:32:72:45:a9:c7:a4:3f:a6:68:
fa:c4:a7:10:7c:34:17:e4:a2:fa:f8:fb:fe:42:96:a2:cd:c8:
15:17:11:84:28:09:af:59:18:0f:54:e6:27:c2:21:12:0f:c5:
2d:9a:1e:39:40:10:4b:5e:c9:c6:e4:52:c2:a1:13:3d:4d:27:
26:2f:2a:2f:61:ad:66:32:ed:09:98:87:1b:bc:01:c5:91:4d:
9b:c9:e4:6b:3d:bd:a4:16:91:ec:79:22:82:a6:83:91:79:93:
73:4b:ab:6a:ed:1e:99:7a:d6:6f:ea:2a:57:41:e6:ab:61:a5:
e9:28:49:3e:e0:25:fd:e4:76:bd:cf:dc:fd:f3:d7:db:80:1b:
d0:35:9b:9c:ed:a1:4c:60:60:74:95:e4:fc:4a:90:d6:f6:49:
46:c3:fc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:34:55 2025 by rpki-client