Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HPLsgl-mOB6OlP05sG6ji2PkGhA.cer
File: HPLsgl-mOB6OlP05sG6ji2PkGhA.cer (raw, json)
Hash identifier: rG83lcTJ10EVAViZje9WMbdYhaG4IfylyZy6JIn++3Q=
Subject key identifier: 1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942827A7DD8E5700DE101B1DAABD1FE313
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:54:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198930
IP: 91.106.128.0/18
IP: 170.133.0.0/18
IP: 185.78.60.0/22
IP: 185.161.144.0/22
IP: 2a07:c540::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:a7:dd:8e:57:00:de:10:1b:1d:aa:bd:1f:e3:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:54:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1cf2ec825fa6381e8e94fd39b06ea38b63e41a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:46:5f:fa:75:1a:6e:1e:8c:da:01:cf:e2:
fc:e4:59:1d:b1:b8:f1:b5:14:92:97:6c:a3:75:46:
10:0c:c6:7f:30:72:9c:1c:41:a7:76:98:5c:4f:fb:
75:12:7a:43:1a:26:ac:30:b5:db:f0:9c:71:ab:59:
d0:1c:40:6b:9b:87:5f:da:7d:00:c0:f5:b6:17:31:
be:7f:42:e8:3a:b4:9c:6f:a5:90:ae:75:80:21:e3:
52:dd:d1:b6:80:7d:d1:49:25:5f:80:49:e3:51:e3:
15:1c:1b:3e:b3:2c:cc:89:3c:fe:73:3b:05:80:cb:
7a:4a:a9:94:31:d3:70:49:78:24:ff:32:10:52:3f:
2c:b1:87:0a:c1:5e:d2:04:3f:20:a0:78:5f:3c:7a:
bb:a0:a7:ce:28:cf:e8:96:a9:6d:1c:33:39:c2:28:
82:93:9e:1c:07:14:40:f0:ea:fd:cd:4e:3b:a0:da:
ef:f8:93:37:bb:39:fb:0e:f1:92:70:75:31:2a:04:
7c:a3:2f:34:47:83:1a:5f:53:84:13:ea:23:21:2c:
fc:44:48:5f:92:d8:20:00:02:05:8c:e9:d5:c3:36:
1a:23:41:71:26:58:34:39:c1:2c:e3:e7:47:1c:6a:
45:16:6f:e9:9a:c8:fe:35:0c:fc:02:64:f7:f7:1c:
3c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F2:EC:82:5F:A6:38:1E:8E:94:FD:39:B0:6E:A3:8B:63:E4:1A:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a009e8-2dc7-4ef8-a5ce-c4c63983b50c/1/HPLsgl-mOB6OlP05sG6ji2PkGhA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.106.128.0/18
170.133.0.0/18
185.78.60.0/22
185.161.144.0/22
IPv6:
2a07:c540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198930
Signature Algorithm: sha256WithRSAEncryption
8d:38:0a:f4:34:ee:94:1c:c5:6f:58:5c:3d:21:60:3f:9f:73:
3b:b3:85:cc:1b:70:29:2c:c0:4b:4f:fb:db:71:ef:72:11:2b:
12:98:f7:14:57:e1:91:ec:c9:77:d6:b5:77:57:4a:ec:0b:4a:
8d:f9:d1:ff:d6:c5:8b:9d:3e:b8:c0:67:61:cf:76:57:31:31:
e8:91:15:69:44:94:63:9e:4a:85:ae:0e:77:4a:45:56:8f:9c:
3d:05:5b:a1:9c:a6:42:d1:f9:5c:c5:19:1b:85:c2:ce:1c:88:
44:7e:ef:58:29:61:fc:1a:05:e2:c7:bd:ab:9b:ac:97:10:78:
cb:a0:14:30:73:97:67:a0:6f:31:8a:e1:a4:ef:3c:85:ee:eb:
e9:bd:40:d4:5c:e5:c3:07:7b:bc:af:bc:01:a7:f1:cd:37:87:
a2:8a:8c:2b:6e:cf:ce:57:27:75:39:bb:e6:f7:5d:9c:a4:8d:
cc:87:03:c3:e3:99:fb:fe:fd:7d:3b:17:6a:1d:fa:47:96:23:
07:b6:ab:ca:89:25:03:03:89:f0:bd:50:81:ad:09:c1:ae:8f:
22:ae:64:fa:f6:82:42:8e:2a:02:28:27:a9:98:04:21:3b:f1:
9b:e3:70:9a:68:5c:2e:87:54:9f:b3:98:e3:71:d6:c0:0b:4c:
e6:5b:f9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 07:18:00 2025 by rpki-client