Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer
File: HRPNPd54nSlHk6_Ok4pTPAK7hNE.cer (raw, json)
Hash identifier: 90t6DGKVYN1L2yiemZvnb/WPm7xAqe7TAtldpINXeYs=
Subject key identifier: 1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019643324BC368E1C6D2392F4A84F16A5D94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 17 Apr 2025 10:01:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210204
IP: 185.235.60.0/24
IP: 2a14:d900::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:32:4b:c3:68:e1:c6:d2:39:2f:4a:84:f1:6a:5d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 17 10:01:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d13cd3dde789d294793afce938a533c02bb84d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:63:26:4a:0f:9f:2f:2d:34:08:8f:01:9d:51:
08:5e:1f:86:57:ab:83:ba:eb:33:b1:49:02:99:2e:
24:38:b2:bb:f6:fe:ce:a2:78:3c:4f:ee:9d:96:a2:
0e:33:1a:c4:a1:2c:d8:46:6e:50:08:ba:6d:20:31:
fe:82:f2:4c:fb:2c:f8:92:ca:51:3e:1a:1b:ae:bb:
b7:bb:d3:b2:77:69:d1:7d:d6:02:9d:cb:55:9e:23:
b7:89:d0:3d:d3:e3:1b:9e:d3:f2:ac:15:5b:f1:1d:
bf:84:a0:92:f9:e5:98:80:72:41:72:71:51:fb:3a:
22:46:f5:5c:b2:aa:6f:7b:e6:ed:a0:1e:68:ef:cf:
42:f6:93:7b:a1:34:c4:6d:b8:4f:2e:34:9f:0a:f2:
65:bb:98:33:45:8a:32:74:12:18:26:9e:25:6e:47:
cb:9a:11:e7:d0:4c:85:3b:77:ed:c7:df:28:5d:2f:
cf:e3:6b:a1:ce:96:ca:64:0c:d2:ba:99:46:93:1b:
10:78:3a:79:d8:c7:ef:16:6e:8e:56:af:2f:d5:60:
36:86:19:7b:e9:bf:23:e4:12:6a:2d:44:85:71:9b:
e6:16:3c:74:af:4d:36:cc:88:27:c3:68:0e:0c:e3:
bc:58:27:12:c6:59:16:7f:ac:3f:9b:05:17:d0:2d:
70:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:13:CD:3D:DE:78:9D:29:47:93:AF:CE:93:8A:53:3C:02:BB:84:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/d29a5f-a52c-4c79-9303-a77caac4625c/1/HRPNPd54nSlHk6_Ok4pTPAK7hNE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.60.0/24
IPv6:
2a14:d900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210204
Signature Algorithm: sha256WithRSAEncryption
a1:6b:50:0f:24:80:b0:29:e2:14:95:2a:3f:1a:f1:ed:99:16:
6f:80:65:cf:ff:61:60:b1:f3:e2:d4:ac:88:c2:b7:10:19:e5:
55:45:b5:bf:86:37:7a:f5:ca:e6:80:e0:c2:fa:b7:76:a2:02:
d1:dc:0b:81:b4:37:65:13:b0:33:a5:cf:cf:92:72:a8:0f:66:
01:7f:9c:8f:5d:9b:ac:13:e8:d1:b8:63:ad:1b:e0:e2:bc:d1:
12:b8:cb:d6:25:4c:d3:3f:dc:c4:c5:76:8d:1e:7b:e4:f2:1b:
73:79:30:2f:41:d8:cc:0e:e5:ea:15:fc:21:a9:64:2f:35:82:
dd:0c:cd:12:0a:cc:7e:a2:6d:26:b7:85:b9:ed:d3:d5:54:15:
88:36:a7:cd:9c:e8:d5:eb:8d:8a:bc:7f:12:92:7f:d1:e0:63:
c0:7c:7d:8d:34:91:7d:ca:92:0f:a5:ba:98:1d:dd:5c:4c:8c:
12:f3:4b:a9:b1:39:14:aa:b2:2e:3f:a6:a1:3b:1e:1b:e9:d6:
86:ae:50:f7:b1:a2:b0:bf:39:4c:d3:da:f6:9a:63:b8:87:d1:
35:e2:e0:6f:b6:60:0a:49:b5:99:5e:57:e9:03:89:8e:3e:80:
79:53:55:ed:3c:93:fd:63:c2:65:93:65:2b:f0:01:92:e7:de:
06:eb:af:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:10:32 2025 by rpki-client