Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wNbTU8k14P4VyBaQ3KEdMe0lAwA.cer
File: wNbTU8k14P4VyBaQ3KEdMe0lAwA.cer (raw, json)
Hash identifier: 6fv2kLQUuh1GYF7e+Ods5qFKIr+g7a9tGr9VPJWJ9lE=
Subject key identifier: C0:D6:D3:53:C9:35:E0:FE:15:C8:16:90:DC:A1:1D:31:ED:25:03:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01981317725F2AEEBD7C067CEC9C1F76C239
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 16 Jul 2025 11:56:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210440
IP: 2001:678:120::/48
IP: 2001:678:10d0::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:13:17:72:5f:2a:ee:bd:7c:06:7c:ec:9c:1f:76:c2:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 16 11:56:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0d6d353c935e0fe15c81690dca11d31ed250300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:e1:e3:bc:be:3f:f4:8e:88:1b:1e:f2:25:
09:43:f8:da:bd:71:92:64:04:04:3d:ed:e5:16:5f:
54:f9:5e:4c:12:da:57:30:a1:bf:d6:7f:0d:72:39:
54:0f:8a:09:cf:71:38:45:ac:f7:35:5e:5e:43:94:
ad:b4:78:4a:94:30:2b:fa:89:e2:e3:f2:27:39:0a:
58:60:c6:5e:98:ff:e3:bc:40:da:f8:cf:91:94:79:
c2:61:12:80:c7:b4:26:92:86:04:2d:82:b8:42:e1:
81:c9:a9:4b:0e:09:17:59:92:b6:fe:db:cb:1b:65:
fa:11:f4:f9:08:9c:f0:1f:e0:d8:ac:c5:aa:e8:9a:
c1:79:6f:a9:1c:4b:bb:65:bf:c1:c7:b7:46:4b:ec:
4d:24:3f:87:dd:f9:84:70:9d:76:ce:7d:60:fd:09:
9c:f0:76:f2:ac:4d:50:64:15:c8:fc:d1:95:61:d4:
49:27:12:8b:a8:29:9c:42:c1:cb:99:75:50:73:7d:
9c:ce:a6:3d:7b:f8:9a:d2:3d:e7:97:e0:b0:7f:a7:
da:32:02:a3:f9:f3:a6:cc:b4:07:eb:e6:85:6c:4f:
6d:5e:ee:75:b0:bd:7a:2d:91:cf:b3:12:24:38:fd:
6b:88:32:f0:45:f8:6d:6f:b6:c4:80:da:2b:89:e8:
44:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D6:D3:53:C9:35:E0:FE:15:C8:16:90:DC:A1:1D:31:ED:25:03:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/878a1856-8347-4b8f-af52-d3316e8a0769/0/C0D6D353C935E0FE15C81690DCA11D31ED250300.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:120::/48
2001:678:10d0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210440
Signature Algorithm: sha256WithRSAEncryption
23:d3:42:99:0c:59:9a:11:6d:a0:be:e8:b8:52:cc:ac:6e:bf:
b1:a0:22:6f:d1:3e:15:d3:9e:19:ed:75:fd:ff:2c:e6:da:16:
25:a2:2d:a9:95:9b:d9:d3:60:2e:e0:ae:41:94:8a:e0:16:3f:
6d:bc:83:85:57:9c:c1:0b:27:20:f6:48:6e:d8:51:2a:8d:f2:
16:c6:14:88:06:54:e8:99:ec:ef:2d:0a:91:e1:da:a7:ab:88:
a9:f1:63:38:6d:40:39:68:de:a1:9f:8a:3e:15:71:84:74:6c:
4a:3a:db:49:2a:b5:0b:3c:55:87:af:2f:c2:2b:43:ab:17:ea:
4e:79:15:a9:29:c2:be:ab:c0:6d:c5:fb:f4:91:90:fc:af:d2:
d0:78:3e:f5:fc:0d:05:1d:4b:2c:34:a0:e8:54:91:ed:b1:19:
07:a5:ff:c0:38:a8:07:10:60:21:fb:dd:fc:72:bf:51:a1:82:
e7:9c:ae:c9:6b:5c:c3:31:06:6e:20:c4:28:d1:55:27:19:b0:
ed:96:2d:dc:34:b9:ba:62:ed:93:7a:3a:a0:74:5b:f8:5a:5a:
17:7e:90:c7:dc:b9:36:30:78:16:9a:55:59:f1:49:9c:e2:7e:
a9:15:34:3d:1c:0b:d7:0c:ab:a5:53:6a:c4:36:17:ca:f8:9d:
80:85:bc:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:28:26 2025 by rpki-client