Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer
File: HVPCyLtzZKVTJC8_F3M2IiezDpQ.cer (raw, json)
Hash identifier: 85NfAXEtNzdxFHJ1gJcluOwT5+MY49CHxReQleuFLzo=
Subject key identifier: 1D:53:C2:C8:BB:73:64:A5:53:24:2F:3F:17:73:36:22:27:B3:0E:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198550EDC139046938D86B2550A0710C9D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 29 Jul 2025 07:21:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 109.205.192.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:55:0e:dc:13:90:46:93:8d:86:b2:55:0a:07:10:c9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 29 07:21:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1d53c2c8bb7364a553242f3f1773362227b30e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:48:35:f9:fc:fc:b7:82:32:2b:c4:2b:00:
df:01:9a:db:53:cd:7d:f5:16:30:9b:f7:4d:8a:7f:
17:e1:05:d9:64:3d:92:6f:e6:ae:c0:27:29:61:c5:
fd:df:ac:a0:85:fc:82:ae:4a:84:0b:92:08:c5:3f:
9d:a9:af:36:9d:12:25:4e:8f:a3:d6:2a:a0:2c:2c:
e6:9a:05:33:b8:49:1d:c6:a3:79:c3:1a:2f:7c:7b:
6b:a4:7b:02:97:7b:b3:48:5e:24:99:9a:94:1c:a0:
ff:7b:fa:ab:86:de:38:6f:cd:1e:f8:4a:81:6e:28:
f5:a7:b4:1e:f8:49:30:02:51:c5:13:ec:e5:e0:3f:
94:1c:04:5e:3d:59:d1:c2:76:cb:8e:ed:ff:4a:f5:
ee:c5:b7:7a:18:f3:34:aa:c6:87:01:59:88:02:2b:
98:9b:41:57:10:cc:7e:60:04:7b:58:04:a6:3e:5a:
ca:3f:0d:ce:a5:be:97:e5:ab:7f:65:65:5c:4b:61:
8d:e0:5e:8c:17:5b:9a:d3:2b:56:02:84:c1:2c:68:
48:1c:d7:76:c5:77:e6:18:4f:55:7f:89:61:65:b5:
d2:ca:88:03:da:65:c0:2e:3d:cc:ce:84:8b:c2:55:
d8:d6:e9:16:15:37:4f:3e:32:17:8a:97:de:97:af:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:53:C2:C8:BB:73:64:A5:53:24:2F:3F:17:73:36:22:27:B3:0E:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/147fe0-fb50-4e84-bca4-135f497c3264/1/HVPCyLtzZKVTJC8_F3M2IiezDpQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.205.192.0/24
Signature Algorithm: sha256WithRSAEncryption
64:65:a5:ef:37:2d:62:0a:70:d2:de:f1:5c:44:5f:e8:98:c1:
85:20:28:0b:48:c6:53:28:4f:e7:04:de:3c:b8:9a:97:22:6d:
9c:42:08:f1:62:6c:53:f6:dc:c5:fb:44:f3:5e:6e:31:b8:22:
3f:dc:4a:9d:8c:af:44:bd:fe:f5:66:b8:f8:4f:a8:ec:74:99:
1b:f7:55:87:f8:c3:f6:de:36:07:0e:2c:37:1c:e3:b9:45:50:
38:3b:f0:20:de:f7:41:85:11:9b:c5:10:59:46:a2:6c:9d:50:
09:a4:6e:c5:a4:70:9b:8b:83:da:7c:55:9a:48:13:38:57:4e:
d5:06:08:27:1b:45:59:e6:49:d9:e8:af:34:08:55:c6:7c:d4:
b4:45:41:b4:8e:63:9f:2a:c0:9f:1b:49:eb:c8:df:ee:a4:24:
67:0a:b7:24:59:d7:9c:58:03:34:45:bf:72:2d:4b:f2:b7:e6:
79:bf:b9:3c:2d:c0:fa:18:e0:b7:31:01:2f:f8:fc:65:73:0a:
a1:00:1e:36:49:96:d9:cf:9c:58:1b:67:41:c4:d5:c9:a2:f7:
79:78:c0:9d:71:12:84:86:4a:71:2f:22:af:69:fc:97:80:e0:
db:af:4b:94:d0:fa:85:22:b3:59:9c:08:a8:96:4a:69:6f:e2:
57:52:f1:df
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZhVDtwTkEaTjYayVQoHEMnWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwNzI5MDcyMTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDUzYzJjOGJiNzM2NGE1NTMyNDJmM2YxNzczMzYyMjI3YjMwZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp15INfn8/LeCMivEKwDfAZrbU819
9RYwm/dNin8X4QXZZD2Sb+auwCcpYcX936yghfyCrkqEC5IIxT+dqa82nRIlTo+j
1iqgLCzmmgUzuEkdxqN5wxovfHtrpHsCl3uzSF4kmZqUHKD/e/qrht44b80e+EqB
bij1p7Qe+EkwAlHFE+zl4D+UHARePVnRwnbLju3/SvXuxbd6GPM0qsaHAVmIAiuY
m0FXEMx+YAR7WASmPlrKPw3Opb6X5at/ZWVcS2GN4F6MF1ua0ytWAoTBLGhIHNd2
xXfmGE9Vf4lhZbXSyogD2mXALj3MzoSLwlXY1ukWFTdPPjIXipfel68VEwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFB1Twsi7c2SlUyQvPxdzNiInsw6UMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YwLzE0N2Zl
MC1mYjUwLTRlODQtYmNhNC0xMzVmNDk3YzMyNjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjAvMTQ3ZmUw
LWZiNTAtNGU4NC1iY2E0LTEzNWY0OTdjMzI2NC8xL0hWUEN5THR6WktWVEpDOF9G
M00ySWllekRwUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAbc3AMA0GCSqGSIb3DQEBCwUAA4IBAQBkZaXv
Ny1iCnDS3vFcRF/omMGFICgLSMZTKE/nBN48uJqXIm2cQgjxYmxT9tzF+0TzXm4x
uCI/3EqdjK9Evf71Zrj4T6jsdJkb91WH+MP23jYHDiw3HOO5RVA4O/Ag3vdBhRGb
xRBZRqJsnVAJpG7FpHCbi4PafFWaSBM4V07VBggnG0VZ5knZ6K80CFXGfNS0RUG0
jmOfKsCfG0nryN/upCRnCrckWdecWAM0Rb9yLUvyt+Z5v7k8LcD6GOC3MQEv+Pxl
cwqhAB42SZbZz5xYG2dBxNXJovd5eMCdcRKEhkpxLyKvafyXgODbr0uU0PqFIrNZ
nAiolkppb+JXUvHf
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:54 2025 by rpki-client