Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HCF8gIa-KdUPg8j9j8kXsAnePIE.cer
File: HCF8gIa-KdUPg8j9j8kXsAnePIE.cer (raw, json)
Hash identifier: nZa7zY6ch+gigmRF76ojHzypeLfVAKoUnoG9KUGc2+8=
Subject key identifier: 1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019614246D584481EB1C1C53B88A02CF99EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 08 Apr 2025 06:44:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 37.0.32.0/19
IP: 185.42.248.0/22
IP: 2a00:4ec0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 13:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:14:24:6d:58:44:81:eb:1c:1c:53:b8:8a:02:cf:99:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 8 06:44:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c217c8086be29d50f83c8fd8fc917b009de3c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c7:88:97:df:cd:b1:4c:66:32:61:55:47:6a:
3a:2d:08:27:b4:da:9d:9c:d5:ed:6a:54:f4:aa:e1:
12:b7:a3:3b:e0:2b:a4:8c:29:88:d5:c1:4b:32:36:
b3:9c:ec:0c:0a:e0:f4:c5:5b:32:42:18:a6:d4:1e:
45:6c:10:95:2a:c7:5a:ac:2f:e8:ee:d0:01:50:8e:
57:cb:db:55:c8:52:7a:da:2f:d8:76:ef:1f:9c:21:
8e:4a:dc:78:d0:55:27:1d:9f:76:c1:c1:03:02:ed:
a9:ab:b3:50:97:5d:1d:ca:06:2b:ee:2e:0d:a4:d6:
98:0b:40:79:88:00:b5:7a:a4:5f:c7:57:a9:e6:43:
9b:f8:d0:80:3a:76:88:3b:c6:e8:51:79:07:95:41:
a9:cf:a2:6a:4f:fc:18:be:38:eb:1c:13:78:06:a8:
5e:f7:3e:ed:2c:b5:52:76:c4:30:b3:ff:fd:16:22:
35:78:80:e4:ce:68:33:9c:9a:ff:92:d2:63:7d:25:
17:77:3c:5c:bd:14:6f:39:05:be:98:42:91:29:91:
0a:d0:21:93:a8:6f:b6:29:ff:b9:93:63:10:7e:5c:
b9:5b:e6:ac:c8:d2:25:85:0f:0a:81:d1:b8:12:56:
32:b9:28:8b:b9:88:b1:12:bc:31:2a:39:c9:91:6e:
67:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:21:7C:80:86:BE:29:D5:0F:83:C8:FD:8F:C9:17:B0:09:DE:3C:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/86bb04-09df-422a-b5f9-f34b31d3b43c/1/HCF8gIa-KdUPg8j9j8kXsAnePIE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.0.32.0/19
185.42.248.0/22
IPv6:
2a00:4ec0::/32
Signature Algorithm: sha256WithRSAEncryption
23:7f:d8:70:b7:da:21:b2:df:c1:dd:c5:74:d7:8e:ad:af:ba:
b1:0e:bc:5e:54:9d:96:94:f1:d0:d3:8d:9e:79:08:0c:a3:50:
fa:d9:e7:b9:6f:8b:8e:9f:77:b0:c5:2f:73:b3:2b:ab:b6:05:
45:c4:95:3e:b4:99:16:97:43:5a:bb:4c:af:4c:8c:2d:57:6b:
b7:19:77:e1:16:b7:6f:3b:71:55:9d:e7:f6:09:1f:7b:01:e5:
08:c7:e5:f9:8f:7e:2c:7d:88:58:b0:e6:2e:74:e2:d6:36:1b:
c2:0c:fe:92:98:be:0c:db:49:c8:6f:9a:6e:46:42:90:35:ed:
83:b9:88:5a:f4:4f:31:97:12:3b:ff:76:8f:a7:22:da:8e:e7:
fc:08:55:9c:ab:43:e3:9e:d0:a8:71:92:24:be:21:9a:a6:b7:
33:ea:22:a8:49:53:31:0d:57:6e:3b:6c:fd:31:bd:88:9c:56:
88:64:af:c5:df:79:30:aa:f0:27:e8:ac:e4:de:e3:41:13:32:
db:4c:24:71:f1:57:c6:bb:fd:86:bd:c2:01:58:d2:47:b6:bb:
4c:21:5e:9f:cb:40:a9:f1:8f:4a:76:98:0a:b2:db:ce:c8:42:
e9:a8:69:34:f7:89:0c:2f:ca:e1:54:81:d7:5e:28:57:27:f3:
4f:c0:82:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:00:32 2025 by rpki-client