Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer
File: WGFXm4dePgk9RzJblzXtv-eAn7o.cer (raw, json)
Hash identifier: ykh/P+MZsrjcUBpF+5Yu2MbMlDh1bH7EL9YFR10YTGs=
Subject key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196ED87DF14A9B0FC59B0FA7C33555E37CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 20 May 2025 11:50:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.17.223.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ed:87:df:14:a9:b0:fc:59:b0:fa:7c:33:55:5e:37:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 20 11:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5861579b875e3e093d47325b9735edbfe7809fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:2c:21:08:83:95:bb:02:f7:da:0d:25:fe:
e3:a6:81:9a:04:6a:43:f7:c4:bf:79:a3:9c:2b:40:
3b:1c:40:32:54:f3:0d:a5:eb:f7:48:f6:f5:b9:45:
5e:dd:d6:65:81:58:34:7c:84:ad:86:17:ef:6f:39:
2f:57:b3:6e:59:a3:be:6a:b6:7d:24:5d:d4:4c:80:
e9:86:3b:8e:d1:71:5a:92:42:27:56:5e:21:83:c5:
3a:7d:32:43:81:54:7c:27:14:4e:03:79:a9:a4:08:
65:c4:f2:ec:44:ca:18:44:2b:c3:1d:e3:13:ef:2e:
40:2e:d3:4d:8f:23:2b:4c:c7:fc:14:26:70:f8:66:
b0:44:d5:8e:ca:7f:20:10:89:5c:c9:41:df:b7:5f:
49:10:b5:a5:1d:a8:c9:5f:b1:fa:92:2c:3e:14:59:
79:2b:47:ec:50:f1:43:e8:2e:fb:4c:03:84:09:8a:
fe:cf:80:29:73:95:2e:fc:1b:4e:32:23:f8:6c:19:
26:a9:5c:6d:bd:88:fa:be:8e:ca:cf:d0:2b:37:bf:
16:fa:07:86:c2:a6:4f:a0:21:7d:b2:b3:eb:e1:25:
a0:75:22:02:45:f0:df:62:ab:3e:2d:7e:76:ce:f8:
52:8b:1b:12:e9:1a:d3:7d:8d:46:2f:30:04:1b:8e:
5d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.223.0/24
Signature Algorithm: sha256WithRSAEncryption
31:0a:b8:6d:e4:51:16:31:53:9c:08:0b:bf:9f:66:0d:f4:a0:
69:d9:77:ab:16:ef:45:95:b2:76:56:72:e6:bc:d5:78:19:c2:
2d:d2:c5:93:95:5d:40:e8:0b:01:7d:b2:4b:6d:27:d7:91:72:
99:e7:ea:1e:58:49:84:fc:9b:a7:aa:ab:b9:88:14:45:50:e5:
98:39:9e:8b:36:b5:9f:44:ae:15:99:f0:6e:de:82:b8:fe:16:
cb:33:54:94:bc:3e:c4:31:f1:5b:d6:1f:f3:b9:17:70:18:17:
cf:44:34:0d:dc:aa:0d:5d:ed:6b:f5:c3:cd:9f:ad:72:b9:4b:
82:e6:3b:7e:6d:5d:af:79:c8:38:1e:3f:c2:3b:e0:45:5a:63:
be:3c:73:87:92:82:d9:98:ba:64:20:a0:3b:78:37:4f:19:eb:
2d:7f:7e:0e:0d:61:85:42:80:6b:7f:ee:18:f7:77:51:2b:df:
c0:04:07:b9:e6:e1:e0:52:cd:0c:16:e9:d8:8a:97:87:72:8d:
22:77:12:d4:82:3e:90:cc:4e:30:65:7b:64:25:11:a2:91:97:
a6:90:27:f6:ff:6f:ae:f1:28:8b:fe:3a:87:b5:b5:5d:53:70:
c3:3b:28:03:15:6f:5d:e1:cf:0d:86:19:8c:8b:d6:36:7f:0e:
dc:98:7d:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:56:56 2025 by rpki-client