Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hIkfjbCMEQ2bW160xalXnkEzyBY.cer
File: hIkfjbCMEQ2bW160xalXnkEzyBY.cer (raw, json)
Hash identifier: PY8I+4UGlqQGKTf/OqdBOkp/lhtYZ4CIZ7c0FSMv+No=
Subject key identifier: 84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB860AE11DBB120047BD6ED6DF52FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.33.105.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:86:0a:e1:1d:bb:12:00:47:bd:6e:d6:df:52:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84891f8db08c110d9b5b5eb4c5a9579e4133c816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e8:66:33:05:72:dd:ea:06:8e:32:89:b5:e5:
09:a2:d5:b2:92:82:24:75:c0:e0:6b:7f:63:7f:c6:
48:2e:ff:a5:d3:a7:c5:a5:35:c7:d0:c9:c7:36:54:
4e:06:13:ae:f3:7e:6b:86:95:aa:94:02:17:97:93:
e2:4f:4b:53:e8:46:5c:b0:56:60:96:c9:e0:4f:06:
1e:bc:64:67:62:a2:c4:94:ea:0a:41:f7:f0:43:28:
5d:2a:46:66:06:21:c2:2d:20:a1:90:bb:23:ac:eb:
de:76:aa:f9:68:e5:97:da:5c:b1:f9:d5:55:e5:8a:
0e:27:d6:d7:05:03:61:48:b5:76:2d:a0:6b:9e:15:
fe:ff:7a:43:9f:b4:2e:11:b5:26:3a:cf:c9:c5:91:
67:aa:b7:e7:53:ca:99:b8:5c:aa:cc:52:3b:e8:34:
20:f0:13:c2:02:4f:d6:3f:5c:af:5c:dc:28:65:db:
f9:1b:67:9f:fa:61:8d:91:ea:e3:ca:8c:b2:80:f1:
e5:01:72:45:2b:c8:84:30:a5:54:5e:87:eb:5b:a2:
86:e0:8e:63:74:44:85:97:f4:dc:82:98:be:b3:1f:
7a:a0:bc:87:c1:3c:5b:b8:1c:34:97:8c:db:dd:9c:
8c:9b:86:9d:19:b9:08:aa:4c:8c:52:04:c8:76:4a:
c7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:89:1F:8D:B0:8C:11:0D:9B:5B:5E:B4:C5:A9:57:9E:41:33:C8:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/a8a5f8-f018-40c9-bef7-34e9cc3d56d4/1/hIkfjbCMEQ2bW160xalXnkEzyBY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.105.0/24
Signature Algorithm: sha256WithRSAEncryption
65:0e:29:6e:00:2b:d7:ca:de:7d:21:0b:e7:22:12:a3:24:b1:
98:cd:b4:7f:63:9f:c7:1a:a8:63:39:3a:8c:08:3f:73:c4:42:
e2:42:50:c4:6e:4d:74:97:60:3c:d4:68:80:a0:e6:30:a2:8a:
48:fa:8f:3d:98:a4:ad:5d:21:8c:e4:5b:d2:a3:20:8a:95:fc:
90:fb:57:31:2b:19:e5:4a:7e:d2:b9:ef:2b:89:77:c1:94:26:
1c:ed:66:47:e6:12:30:7d:c3:fa:ab:e9:6e:a4:d4:26:d6:b8:
aa:27:4d:77:61:b0:e3:37:68:aa:1e:b9:b1:10:6c:6e:90:be:
02:bf:10:bb:a8:7f:bb:d7:13:35:48:9d:c6:d6:e9:28:18:33:
ba:94:bc:76:74:f4:0e:16:a7:ad:e4:e0:7a:e9:37:8a:bc:ce:
5d:51:b4:87:1a:13:90:b6:a4:20:8e:ec:c6:5a:6f:4b:ae:41:
1b:d5:17:ce:dd:6a:d5:48:6f:c2:53:16:db:77:58:64:5f:8a:
fa:2d:f1:84:75:85:1a:d2:c7:c7:a5:9e:fb:b7:09:19:9b:c4:
fc:af:d2:4e:12:d0:1a:75:bc:00:2d:fa:14:fa:a3:42:89:e2:
39:10:7a:4a:91:72:49:ac:18:98:ef:21:99:a7:39:36:9a:19:
b2:ef:4f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:54:01 2025 by rpki-client