Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HGg_lcmNLP6dec3T247oE4uzV3I.cer
File: HGg_lcmNLP6dec3T247oE4uzV3I.cer (raw, json)
Hash identifier: ACaWRKvyffP0S99elvMi5Gm+aAaznIseN8dCC/VMljQ=
Subject key identifier: 1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421445383432CB19B772631EE01C9F2A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8483
IP: 194.158.160.0/19
IP: 195.38.192.0/18
IP: 212.61.0.0/16
IP: 2a02:830::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:53:83:43:2c:b1:9b:77:26:31:ee:01:c9:f2:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1c683f95c98d2cfe9d79cdd3db8ee8138bb35772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e1:2e:67:73:41:fd:f2:00:69:fe:c3:52:70:
52:2f:b7:10:f5:b2:60:7b:dd:05:4a:34:7d:37:a6:
4a:92:e0:49:05:68:a5:11:f6:a9:af:b9:0d:56:f7:
b5:bc:82:a8:30:09:1e:02:fe:24:eb:b7:b9:79:ff:
e4:f2:45:b1:20:4e:ef:1b:35:47:f4:6b:56:03:6e:
da:69:b1:b2:12:5c:1f:9e:7a:dc:63:ef:ba:78:bd:
c5:48:39:90:62:af:20:44:d0:01:ba:1c:da:4a:27:
9f:25:e0:35:6e:c4:79:2a:12:98:03:15:6c:91:9b:
0d:94:17:fd:96:80:a0:53:f5:1a:fb:94:ce:60:00:
1d:06:0f:00:64:1d:02:14:dc:56:8f:b5:a6:f5:82:
7a:9b:71:a7:00:33:6f:ae:17:78:2e:0e:dc:c6:28:
c9:46:60:0e:6c:f3:3d:63:8f:44:eb:b2:bf:40:ea:
34:d0:ab:0f:96:a8:e0:90:be:30:19:95:9c:5a:48:
95:8c:20:59:d3:0f:63:41:03:b2:95:76:80:ba:4a:
36:66:4c:b2:e6:03:bf:e7:c6:ab:70:28:19:d6:44:
1a:d5:06:bb:19:57:8c:f9:db:cf:e3:2d:a0:e4:6b:
ae:e5:47:b7:ed:b5:40:5c:0e:fb:1e:cd:1d:2b:73:
9c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:68:3F:95:C9:8D:2C:FE:9D:79:CD:D3:DB:8E:E8:13:8B:B3:57:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/506f3d-c863-462f-87eb-b3ae1e4c32b7/1/HGg_lcmNLP6dec3T247oE4uzV3I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.158.160.0/19
195.38.192.0/18
212.61.0.0/16
IPv6:
2a02:830::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8483
Signature Algorithm: sha256WithRSAEncryption
6d:15:99:21:ed:3c:df:d6:21:e8:89:41:8a:f2:e2:e4:df:d7:
e6:86:03:45:9b:c4:8b:22:88:0b:22:cb:06:4d:05:40:ab:db:
b2:13:1d:aa:b6:95:c6:7d:95:c3:c1:27:e8:fd:74:f1:8d:ef:
a8:ba:a9:34:c4:42:94:d8:be:f2:14:fa:7c:56:80:15:11:b8:
43:fd:9d:9a:0e:fe:43:56:eb:de:3e:71:32:bb:1c:5f:b0:07:
aa:65:de:6f:5b:64:68:b4:90:b1:e8:98:5b:46:1f:0b:61:3d:
c3:98:90:c3:a9:7b:4b:e8:b7:84:3e:89:6b:c3:4f:12:d4:89:
75:18:44:cf:f0:c8:c9:5c:58:98:02:4c:84:bc:37:0b:23:99:
78:27:6a:68:0b:35:59:ae:bd:56:85:25:50:05:e8:1a:18:69:
03:e1:dd:eb:56:98:59:7c:49:b4:da:01:6e:b4:a5:b7:a7:4e:
15:b8:fa:2f:59:cb:95:ca:f4:c4:e8:20:fe:58:ee:c9:d6:11:
27:66:0b:b5:c4:52:98:20:55:89:30:dd:8f:0b:dc:02:cd:ba:
47:ab:1f:f9:11:0f:cc:2d:f3:36:2e:5d:48:16:fb:68:93:1d:
e2:ff:6d:1d:9a:20:a1:19:72:e6:48:7f:61:4d:f7:a4:32:06:
71:38:8a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 15:39:10 2025 by rpki-client