Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
File: HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer (raw, json)
Hash identifier: ebtw6AQw7bbTgAj+DRtPKeUwYhvbyRis2fe9H1Uui4Y=
Subject key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420682D4349F0881AA0AA0034DA960D1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15386
AS: 35308
IP: 45.152.164.0/22
IP: 46.254.106.0/24
IP: 89.28.200.0/21
IP: 91.193.232.0/22
IP: 91.220.249.0/24
IP: 109.107.135.0/24
IP: 152.89.192.0/22
IP: 171.33.240.0/24
IP: 193.26.3.0/24
IP: 193.151.164.0/22
IP: 195.8.200.0/23
IP: 2a05:1300::/29
IP: 2a09:c400::/29
IP: 2a0b:1000::/29
IP: 2a11:f80::/29
IP: 2a13:fe80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:2d:43:49:f0:88:1a:a0:aa:00:34:da:96:0d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:9b:6f:83:ae:ee:e9:fb:ee:df:b5:b9:4d:
d1:50:f4:0e:a7:fb:2e:bc:79:5f:cf:8d:1b:54:5f:
15:04:80:d3:73:e6:fb:09:16:8c:8d:cb:03:18:3d:
81:36:b2:7d:54:a9:dd:9b:15:86:6e:80:cd:12:98:
18:78:7c:f8:0b:cb:cb:ae:57:14:bc:81:b0:6a:8e:
39:a4:4b:a1:c6:ea:e9:30:36:5c:e2:29:29:40:cc:
8d:79:a7:91:56:07:6a:55:05:34:67:3c:3b:8a:03:
9f:24:cc:46:52:b9:dd:dd:63:8d:81:b0:b7:43:15:
19:ce:36:97:35:4f:60:a6:43:2f:ba:43:78:bc:f6:
2a:6d:ad:b3:2f:8d:d3:18:8d:12:29:c5:9c:7a:36:
69:b1:17:42:32:de:2b:cc:db:4b:11:b0:61:39:3d:
e6:66:0f:7a:05:28:ee:b1:3b:e7:5d:6d:a6:06:64:
35:55:a4:cb:73:5a:6e:67:66:45:13:9a:fe:93:ce:
75:a0:e0:53:ec:12:3a:41:6a:95:74:39:ea:60:71:
fa:f7:07:e7:64:23:8c:1a:da:27:2f:ed:fe:6a:2c:
fa:2f:bd:ad:8a:07:52:a1:c4:ce:d3:a6:5b:ff:a8:
da:c9:ec:84:04:66:e8:f3:b2:5f:88:fb:c6:02:d3:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.164.0/22
46.254.106.0/24
89.28.200.0/21
91.193.232.0/22
91.220.249.0/24
109.107.135.0/24
152.89.192.0/22
171.33.240.0/24
193.26.3.0/24
193.151.164.0/22
195.8.200.0/23
IPv6:
2a05:1300::/29
2a09:c400::/29
2a0b:1000::/29
2a11:f80::/29
2a13:fe80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15386
35308
Signature Algorithm: sha256WithRSAEncryption
a6:64:6c:7b:2f:88:94:3f:d6:71:3e:81:5b:4c:aa:72:58:d0:
38:3f:e4:9e:69:4f:db:e2:98:b1:17:db:24:15:f7:cf:82:9f:
b0:d6:b2:3f:6b:e4:84:20:70:35:29:90:ad:59:ff:a5:6f:0f:
ac:cf:ca:55:35:c0:64:bf:f9:9c:81:f2:7d:e3:f3:ec:64:6a:
1b:2b:bb:99:ea:4a:65:a4:c6:2a:d1:3c:6a:e5:b8:64:c5:5d:
a1:3b:69:b7:7e:ce:42:cd:f7:8e:09:17:f4:0b:14:9d:38:01:
31:72:ca:db:eb:9a:9d:c7:b2:cd:8d:1a:79:58:f9:2d:48:4d:
04:af:16:b1:d7:b6:6b:32:ec:88:f5:39:b5:33:5b:6d:64:eb:
56:65:58:46:63:eb:76:6c:ad:d0:08:61:9b:e5:f3:bc:08:52:
b4:23:1f:1a:06:23:7a:88:04:72:22:b7:82:54:9b:6f:06:a5:
78:9c:e7:41:f9:0e:2e:9e:22:c3:d6:91:10:fd:a8:4a:26:fc:
0a:be:bc:0b:c6:21:55:f0:d4:21:a0:0e:2d:9e:b7:b0:8a:29:
7d:ab:3f:24:8c:ae:77:c5:26:97:a1:ca:f2:b0:6a:6e:73:fe:
56:d0:11:42:82:3c:f5:3c:38:78:88:53:a1:7f:2a:21:ef:22:
98:19:b6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:35:00 2025 by rpki-client