Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer
File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer (raw, json)
Hash identifier: 4EZxZSMGWqjLHCvCLlBXQ96A/M2FxLkj8HIxdsF9aOU=
Subject key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D60920C1279BEC06F276CA720A63B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.10.199.0/24
IP: 2a00:8940::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:09:20:c1:27:9b:ec:06:f2:76:ca:72:0a:63:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1c:e1:79:46:e8:2a:5e:a8:ca:a0:48:48:61:
27:58:69:c5:5e:56:24:ad:d8:9c:6a:bc:fa:6d:dd:
dd:13:95:bf:6d:2b:d0:de:78:69:5c:4c:7a:25:f0:
f2:9e:48:7c:5d:02:f5:78:4d:d5:34:93:20:1e:27:
a2:e9:8d:39:88:70:f5:58:45:d8:3e:3f:f1:91:75:
71:bf:03:1a:56:ca:de:32:b4:70:1a:92:34:86:5a:
73:85:f7:9d:a4:c3:d8:54:dd:c7:d2:7e:81:db:2d:
4c:1c:0e:77:53:4e:d1:73:57:b7:61:d9:2b:62:e8:
0c:2f:d9:3c:4a:dc:b6:16:15:b2:cd:c2:26:19:69:
bf:20:f8:e4:87:92:b1:13:3d:44:d6:d0:24:fd:51:
69:a0:74:c8:c5:ca:c6:9c:a1:50:bd:b8:e4:bb:a2:
40:cd:03:8a:c5:0b:ef:27:16:eb:88:1b:6a:26:1b:
30:40:08:12:ae:23:b6:55:bd:52:a1:d8:06:7e:c3:
da:c7:3d:01:10:b2:8a:44:37:e1:eb:14:d9:c0:36:
f2:0c:dc:ef:08:8d:81:71:83:f5:2f:b7:38:9b:7f:
85:51:cd:09:d7:49:2c:a7:3b:54:7d:3e:65:ba:e4:
dd:a1:ec:cc:40:52:a1:84:84:ff:38:b3:9f:96:26:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.199.0/24
IPv6:
2a00:8940::/29
Signature Algorithm: sha256WithRSAEncryption
a4:03:d2:88:37:02:97:7b:42:1c:5f:c9:e8:97:a8:2c:d8:80:
8b:5f:6a:7f:6b:21:19:d2:17:dc:20:22:86:fb:37:70:58:c9:
1c:dc:1f:79:5b:bb:b6:1d:c1:36:2f:ee:64:94:49:c5:82:e4:
14:65:19:d5:b6:3e:60:22:4a:1b:10:cf:04:dc:91:81:17:f1:
8e:81:4d:18:4c:1d:84:8b:b1:b4:e0:06:2f:bb:65:7c:43:69:
81:da:67:48:42:d7:99:ea:b8:ef:a1:37:3a:50:71:91:7a:36:
15:f9:de:39:47:99:7b:ad:fc:53:a5:29:bc:75:03:57:d4:f7:
77:cd:36:23:81:90:e7:aa:f9:62:24:0b:25:ef:42:be:93:71:
97:a3:c4:14:86:95:b7:5a:ff:6f:db:8e:fe:5b:bc:f6:d0:3a:
dc:b7:ca:89:31:fb:86:31:8e:a1:ae:d2:8c:e6:59:34:a3:98:
68:b9:d0:6e:02:9a:93:11:b2:da:65:57:7a:c2:93:44:48:71:
6c:8d:e5:28:38:5b:74:0c:19:bb:84:5f:bf:b6:62:91:05:b4:
89:6d:ac:e5:e8:17:a7:7c:0b:c8:af:b4:ad:a9:e6:6e:a0:58:
95:f7:f9:32:b6:88:0a:1d:ae:48:c6:99:5f:64:bf:bb:0b:db:
a3:36:4e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:17:49 2025 by rpki-client