Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wBWqbOyG3yEV4qEOkgnYqi35i78.cer
File: wBWqbOyG3yEV4qEOkgnYqi35i78.cer (raw, json)
Hash identifier: c+dXjjqkkD4h6M6jetOPeNvBNuyfCAE1+6J0U6JlEVo=
Subject key identifier: C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196D8EAFC1D349F6B1EF50A280C969C3743
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 16 May 2025 11:46:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8289
AS: 49515
AS: 59727
IP: 185.230.32.0/22
IP: 188.95.32.0/21
IP: 2a02:ca80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:ea:fc:1d:34:9f:6b:1e:f5:0a:28:0c:96:9c:37:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 16 11:46:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c015aa6cec86df2115e2a10e9209d8aa2df98bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:75:af:48:c9:fb:18:df:9f:38:c8:34:ae:30:
f9:68:97:7e:5c:a7:5b:e2:09:50:5b:6f:0b:0b:29:
0e:ad:cf:58:02:c6:25:fa:d2:ba:cb:98:14:42:d9:
08:38:96:c7:79:6a:58:30:97:10:96:f6:6d:b4:f8:
67:7e:57:4e:34:fe:d2:24:18:bc:ed:ba:24:03:b8:
c3:1a:03:61:81:d0:26:73:c1:48:40:99:d2:2d:57:
c1:e5:5e:e9:c2:76:0e:c2:3d:26:7c:1f:45:3d:fa:
81:fa:ab:5e:d5:68:dd:18:cb:a0:b5:80:bf:9d:b8:
43:dc:85:89:4a:4a:c9:b1:e5:a4:ed:dd:7b:0c:a8:
b0:4e:ed:59:91:ef:e2:bb:e4:41:b4:d9:55:d3:e1:
e3:60:3d:2f:9a:4a:16:b5:69:70:8e:2c:0c:b4:c8:
05:4c:d0:35:f3:3c:bf:54:13:7f:92:e6:e1:22:e3:
50:d4:b1:15:a2:a0:91:b8:f3:9e:bb:66:05:c9:aa:
24:d4:e6:32:17:6f:61:c2:d3:f7:6f:a4:8e:db:a7:
f5:a0:3c:f9:67:bd:67:09:ef:15:b0:c3:f6:04:48:
b5:2f:5b:05:0d:58:5d:a5:0e:de:89:0b:8a:84:0a:
10:df:b2:72:0a:6b:c0:67:91:4c:68:ac:4e:b9:2d:
4d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:15:AA:6C:EC:86:DF:21:15:E2:A1:0E:92:09:D8:AA:2D:F9:8B:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74e085-3a29-4c19-8485-b7f9b702ed48/1/wBWqbOyG3yEV4qEOkgnYqi35i78.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.32.0/22
188.95.32.0/21
IPv6:
2a02:ca80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8289
49515
59727
Signature Algorithm: sha256WithRSAEncryption
a1:32:2e:1e:4b:05:d9:76:2f:f2:51:69:b8:aa:7a:a0:86:50:
f4:8b:6b:69:eb:36:dc:56:0c:74:b5:dc:6e:9d:45:14:29:47:
00:c3:c0:44:9f:f4:1c:43:51:3b:91:98:1d:c4:f6:06:65:14:
fa:8a:72:6d:bb:92:f4:74:31:a6:0a:ca:4e:cb:cf:ce:3e:26:
fe:f4:ad:40:15:b3:ce:e6:da:91:56:5e:00:33:55:ca:b2:a1:
1c:0b:9e:a5:4d:15:af:cc:67:c0:bb:d7:33:63:d3:31:0c:0f:
06:1a:1c:81:d3:c2:18:ed:29:50:45:a8:35:c2:ff:cc:ea:6b:
32:0d:ef:60:b6:2c:e5:27:dd:5e:27:3a:ff:7f:dd:31:9b:41:
a7:5b:cf:66:67:83:61:81:20:bf:52:01:89:f2:e6:35:af:b4:
48:e5:a5:84:93:c1:f1:c8:86:c5:e3:af:85:c7:f7:1b:66:ad:
47:c4:c5:eb:2b:e3:83:89:e6:bd:7e:ab:e5:64:c6:0e:b5:7e:
42:24:32:d8:b6:04:d9:b5:17:54:86:09:b1:a0:09:56:52:a4:
fc:84:ed:1b:f0:99:11:10:7b:45:53:8d:2a:f4:1b:1b:1e:1c:
e3:cb:a3:bf:8a:0d:2d:90:54:85:5c:28:72:c9:86:af:46:b1:
1e:15:95:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:52:15 2025 by rpki-client