Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer
File: HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.cer (raw, json)
Hash identifier: zla3I1I2/uEhSE6sjI5XYEcYwi3bwZwISF9ZzapFz9Q=
Subject key identifier: 1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942068695DF4E7DDB94D86EEE90E15C946
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 30971
AS: 49488
AS: 201612
IP: 83.136.32.0/21
IP: 185.102.12.0/22
IP: 193.46.104.0 -- 193.46.135.255
IP: 194.0.10.0/24
IP: 194.0.24.0 -- 194.0.26.255
IP: 2001:678:d::/48
IP: 2001:678:1c::/48
IP: 2001:678:20::/48
IP: 2001:678:24::/48
IP: 2001:67c:1bc::/48
IP: 2a02:850::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:69:5d:f4:e7:dd:b9:4d:86:ee:e9:0e:15:c9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c390bff65dcedca813d7a10d7ec328c2f6eac34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:0b:f1:e1:a7:3f:d1:87:f3:5e:15:33:01:
1d:c4:2a:c8:71:6f:1b:67:53:ea:a1:64:d3:74:52:
c4:19:a5:a4:e2:e0:82:28:f7:5a:94:f2:c4:3a:05:
94:bf:53:02:df:5c:07:21:48:a8:e9:c8:ce:2a:e8:
33:84:86:9b:55:d3:6d:01:87:55:3d:cc:15:20:ef:
0c:28:1e:81:e9:5b:a5:b8:ef:bd:5e:a7:cf:19:e4:
78:b7:eb:8e:fb:f8:6a:ba:6d:94:0b:2d:9a:12:57:
fd:89:72:6b:ca:66:f9:5a:21:e4:a4:f0:12:d4:58:
d6:87:4f:e0:07:da:cd:24:89:cc:6b:65:bc:9c:ad:
db:7d:e4:32:2a:38:16:6f:e9:db:a2:bb:38:1b:46:
a7:72:5c:5f:40:3c:3c:ca:60:11:61:0a:bf:c9:7a:
25:8a:0a:3b:c2:c0:72:b3:40:45:25:a5:00:01:fd:
b1:c0:bb:b2:14:40:7b:5b:a9:08:44:04:31:85:d7:
e0:a1:0b:52:44:9a:05:e9:94:4d:42:5d:1a:24:1b:
e5:85:53:28:c8:21:40:d4:e0:45:99:ed:0c:85:18:
63:15:d7:30:ee:37:e2:e2:bb:92:d9:c9:82:2c:11:
f7:75:5b:e1:50:52:60:bb:0e:b9:4b:13:7f:68:df:
a0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:39:0B:FF:65:DC:ED:CA:81:3D:7A:10:D7:EC:32:8C:2F:6E:AC:34
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/348104-8a41-4949-8552-a9765edc795c/1/HDkL_2Xc7cqBPXoQ1-wyjC9urDQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.136.32.0/21
185.102.12.0/22
193.46.104.0-193.46.135.255
194.0.10.0/24
194.0.24.0-194.0.26.255
IPv6:
2001:678:d::/48
2001:678:1c::/48
2001:678:20::/48
2001:678:24::/48
2001:67c:1bc::/48
2a02:850::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30971
49488
201612
Signature Algorithm: sha256WithRSAEncryption
8a:dc:b1:69:87:b7:40:e0:85:72:d5:50:1d:6d:af:bd:85:8a:
0a:1a:fc:89:54:ef:64:d2:1b:26:a7:63:00:80:3b:31:01:84:
c8:e0:eb:71:0e:7e:8e:e7:ee:88:8f:a3:71:e5:f5:86:b7:ab:
8d:5e:03:84:56:b8:ea:3c:07:e2:c1:dd:a1:54:cc:1e:00:ac:
ca:8d:65:dd:8b:2d:7d:70:4d:73:3d:da:6d:b6:7a:77:bc:80:
e7:6a:95:f2:90:e7:5b:0b:05:4b:d5:fc:07:99:b1:7b:db:fc:
46:ba:32:37:8f:e9:e0:bd:a0:55:09:3f:a0:bf:16:7a:b6:a4:
76:b6:66:9f:5e:64:ea:ea:f1:e6:a8:69:81:e2:f7:05:28:20:
22:e4:44:68:ef:a5:76:cb:5a:86:84:b5:31:cf:d3:7b:bd:38:
36:43:11:0b:ff:d2:bb:7e:07:cd:eb:46:de:34:1c:cd:8a:ec:
48:de:91:3e:7d:df:8b:9c:b7:3b:c9:41:70:fa:4c:cd:ff:11:
47:bb:13:b1:52:aa:7d:f2:42:f0:62:65:1d:16:07:1d:5f:0a:
07:6b:3b:c4:03:24:73:2f:10:72:77:5d:73:62:04:24:8c:50:
2a:74:c3:f1:21:64:2a:43:2b:b8:55:79:a6:fb:d3:74:1a:1f:
4d:a5:7a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 09:29:43 2025 by rpki-client