Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
File: W4smxTL7xStd5nKrNXYdHH2X6yY.cer (raw, json)
Hash identifier: idACwO2akPtB6LXoLu57Y+R1kGKjKKiwKD8NWfC6wZo=
Subject key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196F2540B7581050E4F6D168AF8634B06C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 21 May 2025 10:11:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 188.190.96.0/22
IP: 2a0d:d140::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f2:54:0b:75:81:05:0e:4f:6d:16:8a:f8:63:4b:06:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 21 10:11:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:4e:10:b9:1f:47:d4:b5:97:6b:27:97:bc:
9e:88:fc:93:0b:5e:5e:d4:f2:17:ac:c1:ec:f3:76:
bc:6c:52:8f:93:b6:4b:51:11:85:db:3e:3f:d2:6a:
b3:39:35:d9:de:f6:97:c4:0a:46:03:f7:46:77:fe:
56:ab:df:c1:43:9d:4b:cd:36:9f:c7:99:d4:06:54:
5d:e4:73:25:7e:6c:5c:bb:7f:ae:bd:b4:11:24:00:
6c:9f:c6:df:45:e9:5f:68:00:e6:f0:d0:1a:4c:af:
c4:c2:38:e0:47:9b:94:32:ae:6c:a2:1e:05:0d:10:
13:f4:75:94:a4:26:0c:20:12:43:1c:63:0c:bf:20:
43:f0:82:d4:0f:f6:3b:b9:98:af:d2:27:03:08:b1:
67:9e:4b:0b:80:c3:60:f5:1c:4f:8f:3d:74:b5:21:
23:ea:05:ae:a6:60:16:b8:94:c2:68:2f:d6:b9:7c:
c8:3d:85:47:92:e0:30:b0:bd:93:5c:81:79:ca:09:
4e:e8:53:c6:ce:6e:c7:8c:62:80:30:33:2f:76:a4:
54:d0:b3:84:61:00:f5:b0:9d:74:79:91:3a:54:83:
0b:ad:87:07:62:83:5b:72:a2:0e:8d:cb:84:17:3f:
d4:d8:6c:c1:96:f7:b6:2b:c6:2a:7d:ae:60:b0:b2:
12:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.190.96.0/22
IPv6:
2a0d:d140::/29
Signature Algorithm: sha256WithRSAEncryption
4a:27:10:e5:f7:c0:dc:dc:50:3d:3b:b7:5b:1f:af:7e:9e:80:
6f:36:27:af:ef:5c:e0:e7:2a:7a:98:8b:1c:98:2e:a6:9b:c0:
1b:22:d0:36:ab:00:3b:99:46:3c:83:57:fe:ed:ee:8a:86:0a:
8b:1d:8c:4f:a0:f2:b2:51:a4:61:33:dc:99:37:24:5d:97:af:
fb:a7:90:1d:7e:c9:16:28:01:2c:a1:bf:15:43:8a:16:76:97:
4b:e7:58:01:14:01:50:2a:86:5e:5c:8e:7c:d9:5f:f0:32:e5:
39:f2:fb:06:d1:c8:5a:58:c4:51:45:6e:19:36:3c:c6:c3:9c:
35:6c:6e:55:5e:13:1c:f5:e5:57:c9:07:2e:1e:15:22:2e:25:
5a:46:de:8a:87:05:8d:d1:eb:bd:d9:68:7f:ed:4b:4e:ba:f3:
95:87:bd:2c:42:d1:1f:d5:4b:b5:32:9b:1a:3c:24:46:4f:cb:
1b:a7:98:34:a7:c3:9e:8e:f5:85:26:be:8b:1d:51:ed:f8:58:
eb:03:ee:cb:f0:bb:8e:f3:06:76:e0:69:65:db:e7:40:03:d1:
e6:a3:43:c3:42:65:28:eb:81:f4:38:49:f8:40:96:bc:46:a6:
16:e6:bb:96:73:7b:0d:bf:30:08:50:70:81:a6:d8:65:07:e8:
e2:ea:78:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:14:10 2025 by rpki-client