Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
File: hRJy5OgYa5zz0etCZlxTznFPTUs.cer (raw, json)
Hash identifier: SCJWPZvBHz4apx4IOJIzHjbng/C1RlJruGxN1nG3f38=
Subject key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D0D6A501A1A41C3C09B8A86235EB4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.190.8.0/24
IP: 2001:67c:2ae4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:0d:6a:50:1a:1a:41:c3:c0:9b:8a:86:23:5e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:df:85:b9:c0:80:d5:f8:da:ca:99:a7:20:d4:
27:34:21:3a:06:b9:d8:96:41:08:92:66:02:7b:32:
ce:be:a3:f6:9e:dc:74:55:0d:4d:41:e5:7f:b2:e1:
9a:04:0f:ef:c6:52:ee:e6:e9:0c:88:d0:85:86:e6:
0d:f4:b5:c9:5e:3e:8e:23:b1:41:6e:6d:ed:40:15:
65:a2:9b:b6:95:33:c5:58:00:66:a0:77:70:73:28:
8f:1c:07:05:58:a2:25:55:46:45:b0:4e:75:6c:01:
29:b8:ac:ab:c6:7c:1a:6a:0a:72:c5:b5:ae:cb:fa:
59:9d:d6:8d:eb:93:6e:4a:1d:1f:d8:f1:05:bf:f2:
bd:0b:cc:5d:18:b4:9d:cf:05:89:aa:a8:f0:0c:dc:
59:81:8b:cd:a1:5b:c3:07:f2:31:23:3a:4e:39:c6:
fb:f9:6c:68:f7:dc:b4:32:bb:76:18:8a:cb:ee:84:
3c:60:10:29:aa:a2:17:df:da:bd:78:6b:d1:73:fb:
b9:bd:b3:4b:f3:98:6f:50:f9:5e:b7:cc:7d:35:96:
2d:dc:31:fd:fc:41:a3:f2:80:7e:37:60:9e:c4:1c:
34:f6:31:81:d7:d1:ca:1f:a6:6d:0d:d7:bc:57:fc:
2c:f5:79:13:07:df:a3:24:10:a6:b8:0e:bd:cd:cb:
66:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.8.0/24
IPv6:
2001:67c:2ae4::/48
Signature Algorithm: sha256WithRSAEncryption
79:5b:0a:65:1f:d6:f8:f7:33:68:50:6d:48:d4:f4:05:0b:3c:
90:e2:bd:39:cc:01:dc:77:c3:06:70:e3:29:57:e5:dc:ae:23:
0c:0d:52:eb:69:9d:bc:3a:b7:ca:31:3f:d9:84:44:12:53:41:
66:01:dc:b4:62:85:b5:a9:94:c4:ef:82:bd:cf:63:ef:a0:dd:
e7:c5:59:b8:ca:1f:4c:6b:65:e6:bb:c8:14:18:c3:4f:eb:8f:
9e:a6:f5:a8:16:f5:f6:eb:10:cc:f5:b9:70:db:33:e2:67:0f:
11:c0:cb:49:e6:ef:94:a2:a2:bc:7a:5e:2d:56:40:a0:ca:a6:
3f:d7:da:ba:02:1b:3f:da:1c:e5:6a:06:40:84:aa:3b:38:9c:
aa:be:e7:ef:f5:a4:cc:40:93:b9:f5:a4:9d:cc:d8:88:3d:63:
01:18:ef:a6:75:73:2e:53:a3:39:bc:93:8d:9a:ca:c7:31:bb:
2b:9f:85:cb:1d:bc:df:3c:16:df:b3:9c:d7:c2:04:2d:3c:c9:
fb:28:1e:53:ba:14:66:f5:9d:f2:c3:6c:c5:72:5b:a9:b1:39:
33:22:5e:c6:71:8a:cf:be:29:11:01:0c:48:7c:86:33:5e:d0:
dc:e4:cb:8c:0b:8a:b0:53:d5:b6:5a:ad:86:b5:b3:74:9a:0f:
60:33:67:12
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgISAZQijQ1qUBoaQcPAm4qGI160MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTEyNzJlNGU4MTg2YjljZjNkMWViNDI2NjVjNTNjZTcxNGY0ZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9N+FucCA1fjaypmnINQnNCE6BrnY
lkEIkmYCezLOvqP2ntx0VQ1NQeV/suGaBA/vxlLu5ukMiNCFhuYN9LXJXj6OI7FB
bm3tQBVlopu2lTPFWABmoHdwcyiPHAcFWKIlVUZFsE51bAEpuKyrxnwaagpyxbWu
y/pZndaN65NuSh0f2PEFv/K9C8xdGLSdzwWJqqjwDNxZgYvNoVvDB/IxIzpOOcb7
+Wxo99y0Mrt2GIrL7oQ8YBApqqIX39q9eGvRc/u5vbNL85hvUPlet8x9NZYt3DH9
/EGj8oB+N2CexBw09jGB19HKH6ZtDde8V/ws9XkTB9+jJBCmuA69zctmoQIDAQAB
o4IClTCCApEwHQYDVR0OBBYEFIUScuToGGuc89HrQmZcU85xT01LMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmL2VkOTRi
MS1iNTczLTQ1ZTQtOWUyMS0zZjQyYzcxNzgwYmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvZWQ5NGIx
LWI1NzMtNDVlNC05ZTIxLTNmNDJjNzE3ODBiYy8xL2hSSnk1T2dZYTV6ejBldENa
bHhUem5GUFRVcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDAGCCsGAQUF
BwEHAQH/BCEwHzAMBAIAATAGAwQAw74IMA8EAgACMAkDBwAgAQZ8KuQwDQYJKoZI
hvcNAQELBQADggEBAHlbCmUf1vj3M2hQbUjU9AULPJDivTnMAdx3wwZw4ylX5dyu
IwwNUutpnbw6t8oxP9mERBJTQWYB3LRihbWplMTvgr3PY++g3efFWbjKH0xrZea7
yBQYw0/rj56m9agW9fbrEMz1uXDbM+JnDxHAy0nm75Siorx6Xi1WQKDKpj/X2roC
Gz/aHOVqBkCEqjs4nKq+5+/1pMxAk7n1pJ3M2Ig9YwEY76Z1cy5Tozm8k42ayscx
uyufhcsdvN88Ft+znNfCBC08yfsoHlO6FGb1nfLDbMVyW6mxOTMiXsZxis++KREB
DEh8hjNe0Nzky4wLirBT1bZarYa1s3SaD2AzZxI=
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:40:02 2025 by rpki-client