Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer
File: hKvwyYFwGrqX5PzQvtTkzbhpIEc.cer (raw, json)
Hash identifier: mMTWb9tvw1w7ONoqJDFOYx341hJe15k5oYGX8wSIAXE=
Subject key identifier: 84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198A2A32C6464C9B9C5BD74E63682C55947
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 13 Aug 2025 08:54:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 109.71.152.0/22
IP: 2a0f:58c0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:a3:2c:64:64:c9:b9:c5:bd:74:e6:36:82:c5:59:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 13 08:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=84abf0c981701aba97e4fcd0bed4e4cdb8692047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:06:cb:dd:0e:12:1b:19:63:be:01:ef:a4:1b:
98:c0:a7:55:58:72:bf:2e:06:48:9c:b7:c7:e1:cc:
ff:37:b1:b8:01:e3:ee:48:32:87:9e:dc:a8:bf:c5:
37:81:b7:9b:57:11:36:a6:59:8e:ce:9a:00:24:26:
31:69:84:70:b9:f9:56:f9:a2:4c:a9:38:b5:83:20:
8b:b3:93:eb:f3:df:7c:3c:02:25:9d:dd:fd:62:02:
42:38:fb:10:5e:46:52:d5:4e:6a:36:46:23:12:c4:
e8:62:c1:77:9e:40:e6:1f:07:86:41:03:20:48:92:
8a:77:26:2b:f1:39:db:3b:8e:18:c7:33:c4:30:f3:
66:e3:05:58:10:fb:c9:35:4e:2f:ed:b9:a2:93:55:
3f:8a:b2:2f:53:ba:30:27:6d:a4:c9:dc:6b:e2:45:
a5:a6:8b:d5:a5:33:49:87:c8:40:3a:70:ce:7b:0c:
a6:e2:6c:d1:3b:a7:e9:c4:5d:a8:5a:8d:37:cc:69:
1f:cb:3d:e0:bd:a9:f3:87:e8:6e:55:e2:2f:7a:da:
5b:89:d1:39:ad:ed:79:b9:39:61:b0:72:0a:71:01:
bf:47:99:0b:e3:2f:13:8f:45:b7:5e:03:76:50:82:
34:c4:66:01:a5:be:b3:ef:73:6a:3f:e1:18:bc:e9:
31:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AB:F0:C9:81:70:1A:BA:97:E4:FC:D0:BE:D4:E4:CD:B8:69:20:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9952c8-2d40-41e2-ba70-61bc7ecc485c/1/hKvwyYFwGrqX5PzQvtTkzbhpIEc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.71.152.0/22
IPv6:
2a0f:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
15:95:4c:90:67:e5:b1:eb:fc:05:01:84:b3:72:bb:25:26:3c:
d7:7b:97:bc:7f:8c:0a:2a:a3:b3:39:3f:d4:6a:ee:15:45:28:
5b:f6:04:d0:88:dc:e2:78:4e:ea:d5:9e:0f:01:f8:b9:75:99:
cb:bd:6f:3a:4a:9d:0c:5d:0a:82:78:54:3f:41:78:90:ec:85:
1c:5b:e3:ba:46:02:40:08:34:9e:69:7f:2c:00:95:09:72:a8:
b9:10:3a:86:44:27:9f:66:c9:1e:f2:f7:d6:9a:21:b8:e9:8d:
85:ef:15:ea:4f:e1:ce:d4:7e:0a:d8:6e:0c:9c:a9:24:76:35:
bc:04:7d:63:72:65:2c:f5:9e:f4:11:a3:d3:4a:91:f0:6c:fd:
e1:72:51:b4:9d:a6:5b:5d:e7:2b:00:03:d8:cd:d7:0e:a1:e2:
33:ed:c8:bc:5c:64:f9:30:92:84:ab:7b:5f:00:ff:77:c7:39:
89:e8:05:5c:56:5b:6c:27:36:66:3e:ea:da:71:b0:08:65:6b:
4b:76:9c:21:92:4f:30:85:ce:de:3e:ae:ed:7c:0d:3d:38:32:
de:bc:43:4b:ca:a8:48:2e:e3:c8:17:e2:07:a1:85:ec:7d:34:
dc:50:09:bb:c2:3e:e0:a5:ee:6b:fc:b6:3f:78:91:e0:bd:c2:
b8:5c:9d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:16:07 2025 by rpki-client