Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer
File: hpwOc330guiapnJs3YqZWKp0ER4.cer (raw, json)
Hash identifier: zukqPGVEget8/7C7nHsVq5vYiQXgpx/Xo3C7Q4j6Q80=
Subject key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01978C6921571031C2E8048292D682BAC33D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 20 Jun 2025 08:16:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 192.135.217.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:69:21:57:10:31:c2:e8:04:82:92:d6:82:ba:c3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 20 08:16:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=869c0e737df482e89aa6726cdd8a9958aa74111e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a5:a6:cc:ca:1c:01:a9:d6:8e:a0:87:c8:1a:
68:18:e5:45:a1:0d:e9:a9:d2:ca:45:4c:3d:b1:11:
0f:22:01:65:09:e5:e5:c3:47:79:48:e3:d2:a0:46:
f1:32:cf:60:cb:8e:0a:4d:09:1c:6a:6f:ed:23:fc:
f1:cb:38:a7:b1:14:24:c9:b9:ea:8a:80:af:4c:55:
f5:30:62:6e:44:95:c8:ca:04:5d:46:6a:3f:64:0f:
4a:02:59:6b:95:b9:b1:84:a5:ac:a8:0a:5d:b1:41:
ea:d7:c0:a3:95:8e:c6:1b:08:8b:72:04:78:ac:b0:
5a:26:78:c3:4d:d1:e1:0d:41:34:ce:5d:d2:fb:fe:
26:c2:4c:c2:13:47:1c:67:6a:9b:15:b1:f7:07:7f:
4d:ac:ff:e3:80:22:77:51:43:78:9e:a3:f6:04:11:
98:fb:a6:e2:79:e0:ef:14:c5:88:9e:38:31:c5:94:
14:9e:ee:51:87:b6:5e:dc:6c:9f:36:01:82:aa:a5:
19:1f:fb:55:51:87:58:e5:5d:bf:3a:2b:02:64:80:
46:92:05:b8:04:4c:db:f7:91:e4:13:8d:a8:ba:b7:
be:ee:a8:0c:a0:4b:6e:85:17:67:08:03:06:b7:f4:
d7:19:bf:20:3c:6e:97:3c:97:35:3c:16:bb:6a:92:
e0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.135.217.0/24
Signature Algorithm: sha256WithRSAEncryption
47:fd:01:5a:8e:e9:c5:b2:da:b2:38:53:b5:48:39:a0:d0:de:
65:aa:9e:e6:4d:05:2f:a9:41:92:2e:fd:a0:73:22:6f:7a:6c:
6f:c9:3c:c7:7f:f8:f3:d5:1f:37:c3:ab:3c:10:78:c5:b1:52:
43:6c:c4:12:a2:58:ca:d6:8f:f7:5a:e7:18:76:df:a9:d2:d5:
12:09:de:fc:7a:e5:1f:e7:2e:4b:20:25:41:be:2d:e7:d3:5f:
d1:6b:cd:94:aa:b3:17:c9:64:5d:32:ab:8b:70:c9:b5:7e:5c:
1c:d4:26:f0:93:62:95:d7:b9:18:87:df:f8:2e:60:32:1e:6f:
f9:8d:c5:a3:24:2c:ff:89:3b:42:5c:7d:cb:95:ab:5c:5a:74:
97:64:f2:94:41:3f:4f:90:7d:55:90:42:38:b8:c3:54:74:e2:
1c:1a:d1:9e:75:43:f6:02:0b:7e:e8:8a:1d:3b:ff:25:b1:f3:
2f:de:fb:34:17:bb:90:ae:41:80:64:1b:8e:c8:05:a0:26:b1:
bf:e5:ba:62:16:c4:da:dd:91:1b:cf:ed:4f:32:e4:a4:ce:5f:
1b:69:43:61:f5:85:a6:17:4d:81:cd:c0:cc:0e:92:83:f4:b8:
67:3b:90:40:92:20:9d:3f:f2:7e:c9:0e:a8:f2:ba:68:55:f6:
82:ab:5f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 16:48:17 2025 by rpki-client