
Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58_GwHE9iA8Xja-Ve5gjMImuTVU.cer
File: 58_GwHE9iA8Xja-Ve5gjMImuTVU.cer (raw, json)
Hash identifier: eGIE/leMNu68g7G3VX8prV6Vuq1kJ7RtECrRgftZtms=
Subject key identifier: E7:CF:C6:C0:71:3D:88:0F:17:8D:AF:95:7B:98:23:30:89:AE:4D:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FA42A20F3F82966236876E257654ABF0F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/bbea70-d9b9-4456-a352-526e6081eeff/1/58_GwHE9iA8Xja-Ve5gjMImuTVU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/bbea70-d9b9-4456-a352-526e6081eeff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 27 Jul 2026 15:20:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219134
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:2a:20:f3:f8:29:66:23:68:76:e2:57:65:4a:bf:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 27 15:20:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7cfc6c0713d880f178daf957b98233089ae4d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bb:8e:f9:5d:47:d2:2d:7a:07:1a:bb:88:98:
9b:e1:68:75:b7:e2:cb:a4:b9:4c:e2:65:94:fa:c3:
69:ff:44:93:33:e4:29:26:a7:da:3a:29:91:91:e6:
17:14:21:5d:78:c0:7b:e1:1f:68:0b:22:cf:c8:cb:
bc:d4:e8:65:15:33:be:4b:e8:8f:7b:be:37:27:bf:
5a:5e:ee:3f:75:24:6f:39:da:bc:75:38:d8:e1:8e:
d6:30:3d:1a:ef:a4:cd:c0:c6:5a:cd:ae:e9:71:4d:
20:eb:29:9f:70:aa:60:0c:36:24:07:37:48:21:81:
15:b5:7d:88:d0:d2:5e:fd:c9:67:de:d0:0b:ed:12:
73:63:0a:12:92:86:aa:b3:ed:86:42:bc:b7:3c:78:
ea:5d:b4:51:7a:cc:60:f7:08:7e:46:5f:19:f6:92:
01:ed:30:ff:f4:03:3f:44:68:47:93:fe:70:a2:e1:
a1:e6:b6:14:8a:46:62:1f:b7:85:97:10:e7:48:9c:
24:30:42:e3:37:f6:57:7a:5d:d0:0a:6d:be:e1:5f:
01:d8:0e:1f:bb:ce:24:d4:74:08:b1:fb:c5:c6:bc:
45:42:8a:65:f1:84:5f:d8:58:85:be:d4:73:04:6e:
54:55:85:51:55:72:8b:df:fd:2e:e7:0c:ff:9a:ec:
62:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CF:C6:C0:71:3D:88:0F:17:8D:AF:95:7B:98:23:30:89:AE:4D:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbea70-d9b9-4456-a352-526e6081eeff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbea70-d9b9-4456-a352-526e6081eeff/1/58_GwHE9iA8Xja-Ve5gjMImuTVU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219134
Signature Algorithm: sha256WithRSAEncryption
35:10:0a:18:d0:79:47:94:1c:2b:64:59:25:21:d5:72:f3:8f:
dc:ce:49:51:e8:7b:1e:d1:d5:40:8c:af:11:12:89:44:98:56:
ed:18:65:6c:87:97:53:77:3c:37:cc:6a:d7:4d:fb:88:d6:d2:
59:ee:40:43:ba:c6:4c:bd:7d:c8:a0:4b:6f:fc:d7:9f:d3:38:
f6:19:74:36:7a:ba:8a:28:f1:7d:f6:a0:6a:9e:ee:1d:73:35:
86:7e:d3:33:17:54:b4:39:c4:b4:63:1a:65:a5:06:b5:83:5f:
dc:ea:20:4d:2f:b5:0a:88:4a:a0:11:16:0a:9e:07:d4:2b:d7:
6a:6d:61:fe:85:ae:fb:76:84:80:b3:52:2a:be:8f:c9:ab:ad:
50:36:9e:28:bd:eb:38:bf:55:a7:4c:ef:21:8e:23:59:38:a9:
31:3c:9b:ea:41:67:57:dd:86:be:41:fa:1b:57:f7:f7:1f:99:
ad:6a:b8:11:78:36:bc:40:40:8d:79:9a:ee:2f:6c:86:0b:dc:
45:a4:e2:e3:b2:30:e8:f6:26:0a:a4:4d:bb:cd:f8:7f:67:c6:
87:7f:3b:c5:e2:c6:e1:7f:c5:8b:77:75:9b:1c:be:f1:32:7d:
7f:06:f6:3a:71:6f:c5:a1:84:74:e6:1c:d6:1f:72:76:a6:ec:
33:58:23:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 03:56:36 2026 by rpki-client