Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jHFLbLK61OdjmoqicQKPWqG8asI.cer
File: jHFLbLK61OdjmoqicQKPWqG8asI.cer (raw, json)
Hash identifier: o3tZ9wjyQui6xNdoYf3ZILb6OfDO5cJs0O0ylNZbnW8=
Subject key identifier: 8C:71:4B:6C:B2:BA:D4:E7:63:9A:8A:A2:71:02:8F:5A:A1:BC:6A:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01983187A15B4BF0922FE3F4CB50AEE7E628
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 22 Jul 2025 09:47:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214901
IP: 217.26.222.0/24
IP: 2a13:5140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:31:87:a1:5b:4b:f0:92:2f:e3:f4:cb:50:ae:e7:e6:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 22 09:47:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c714b6cb2bad4e7639a8aa271028f5aa1bc6ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:07:c0:b5:21:67:2f:55:1a:c8:e8:05:af:6e:
7c:1f:89:35:14:c9:92:84:94:ab:e0:2c:ce:bc:59:
40:34:77:f8:f4:5a:ee:4d:df:ab:f5:08:7d:f3:96:
82:77:d0:6c:3d:11:ef:d4:e7:99:7c:ec:d0:09:fb:
ea:a5:ea:9c:6d:dc:0b:9c:93:30:6b:db:4d:e2:29:
57:4f:06:fd:b2:b9:a6:ec:6c:9d:8f:a6:22:50:8d:
04:3f:8b:a2:7d:ca:53:f2:31:84:93:fc:ce:3b:a7:
c9:5b:fb:58:e6:61:ce:f6:26:82:5e:86:73:07:cf:
ab:e4:ff:de:3a:e8:14:9e:1f:b5:05:b5:62:f6:d9:
18:d5:0b:87:d3:57:35:74:2f:2b:4e:2f:d3:b9:8d:
7d:f9:65:21:ef:55:5d:53:17:2f:13:6f:ca:0a:a1:
af:df:d4:95:d9:98:0c:cc:1a:53:e3:3f:3e:d7:5d:
f1:46:48:80:91:c4:43:68:b8:a7:c4:7e:56:f2:bf:
46:6b:37:ec:6f:89:11:8e:70:1a:20:a6:5a:9e:8c:
9b:0b:03:67:a5:90:b8:1b:c3:41:41:7d:6e:d8:9b:
c4:47:b2:91:fa:7d:0a:81:20:09:06:32:10:c3:2f:
1d:5e:63:bc:fd:cb:22:b6:03:af:0c:5a:0c:2f:b2:
e5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:71:4B:6C:B2:BA:D4:E7:63:9A:8A:A2:71:02:8F:5A:A1:BC:6A:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/02a8d6-9158-4aeb-a750-78753a104226/1/jHFLbLK61OdjmoqicQKPWqG8asI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.26.222.0/24
IPv6:
2a13:5140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214901
Signature Algorithm: sha256WithRSAEncryption
5d:25:91:fb:14:d5:d5:dd:85:49:7f:11:b9:49:e4:ee:f2:d3:
8c:d4:46:e4:a5:9c:0c:2e:02:f3:40:ac:90:8f:50:0b:96:62:
ba:da:7c:4d:e8:e4:fe:ea:13:77:3c:d9:b4:c0:fd:69:13:92:
39:65:92:e1:1f:61:07:eb:e7:db:e4:f0:b7:32:cb:20:e7:3b:
25:cb:76:06:d0:ea:94:85:cf:fd:42:3e:cb:c7:4d:4c:61:e4:
61:3e:1d:3d:9d:33:35:d6:be:41:8b:0f:d8:bf:e3:30:1d:90:
57:8f:82:57:b5:dc:f1:5d:aa:5d:4d:d4:68:64:44:c4:87:ac:
6f:55:12:62:ac:57:22:1e:36:5a:9b:10:13:46:a1:04:70:54:
8d:1c:2a:5a:e2:80:85:f0:e5:29:9f:02:f7:5d:bb:0a:11:6f:
6c:3c:3f:28:3a:c0:d5:ee:a9:15:fa:2c:6a:09:d4:08:46:c9:
0c:4e:e1:f6:da:75:eb:7b:ae:bc:d8:6c:1a:d6:d1:7b:62:01:
b8:0b:4b:5a:1d:e3:54:30:d0:30:24:b2:ad:04:65:da:72:4a:
a6:bf:94:4b:ef:ec:d7:f2:7b:03:50:2e:9e:8d:44:9e:08:a0:
e3:e1:f7:42:db:1a:a1:f0:b1:94:3d:bf:6b:6b:71:07:75:6c:
b4:4b:4c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:17:36 2025 by rpki-client