Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
File: wSrJsU_SYajSdjqtQXQyvrxJoNY.cer (raw, json)
Hash identifier: 1SzF8WFwrOP0aldNPeQ35e2YM8iSnWbvwRGadvP+U3k=
Subject key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019919BB23A14335BF1EF87994D722A067F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 05 Sep 2025 11:55:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212191
IP: 45.143.28.0/22
IP: 195.60.81.0/26
IP: 2001:7f8:166::/48
IP: 2a0e:e0c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:19:bb:23:a1:43:35:bf:1e:f8:79:94:d7:22:a0:67:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 5 11:55:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d2:67:53:6e:5f:37:9c:ab:ce:13:76:cb:ad:
3c:55:12:69:7f:32:df:a8:84:6d:e4:b4:48:c2:f7:
2d:e5:b6:df:f3:df:eb:ce:99:02:6f:a7:49:4d:10:
2f:12:7f:7f:d6:c7:59:60:ac:1a:c0:2e:71:11:20:
71:b4:69:4d:94:3e:c0:04:07:e1:60:ce:9e:df:d1:
d4:8a:c4:65:85:27:1e:72:e7:e2:5f:89:c0:26:6e:
1c:c1:89:58:86:d5:87:f0:a2:b6:46:3c:67:73:88:
d0:b1:a7:13:6c:bd:61:6d:52:4b:7b:0e:90:5c:cd:
bc:46:c5:2b:fa:08:b4:ef:ee:ae:5d:67:73:51:99:
13:f0:5b:cc:11:ea:6e:19:6c:e0:e5:98:c8:05:c5:
22:dd:f3:ce:6c:08:fb:63:e3:07:18:38:8d:57:a7:
a1:53:52:53:5b:10:3a:11:46:4a:a1:c7:df:e7:0e:
c3:6f:b7:76:e9:79:13:1a:3a:f0:4e:b7:c6:07:89:
fc:c6:85:1e:f5:75:32:24:e7:44:93:97:01:55:fe:
95:02:56:c8:ae:24:f5:5c:77:f3:68:88:9f:75:f4:
7f:ed:1a:15:31:57:5e:65:2f:a6:c8:08:d2:e2:b6:
82:d1:93:74:15:47:2d:29:86:fb:46:a8:0e:83:99:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.28.0/22
195.60.81.0/26
IPv6:
2001:7f8:166::/48
2a0e:e0c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212191
Signature Algorithm: sha256WithRSAEncryption
12:31:9d:f9:9e:0b:66:bd:18:ba:90:46:45:95:fc:2f:ea:39:
b5:c8:42:ab:f3:5d:85:42:be:8a:38:8f:91:8c:20:96:52:2a:
3b:f4:db:70:17:bb:6f:8f:af:13:b7:1c:57:d6:38:c4:b2:f5:
9a:70:b7:ba:21:18:50:b0:3d:b3:23:b3:61:e1:7e:bd:5b:f1:
4e:bb:42:7a:e3:55:84:df:72:f2:a2:72:27:47:b2:db:6b:05:
5a:bb:1f:18:2f:66:2c:a2:22:80:75:df:37:80:e4:53:ae:c4:
1b:1e:03:f4:bf:07:54:d3:b8:5d:10:95:62:b3:e3:32:f7:83:
dc:ad:7f:2d:2f:86:c1:a8:ee:90:c2:20:84:6f:38:b5:76:ef:
58:fb:cd:1c:38:5f:f9:5e:4b:30:ea:f1:5a:68:67:ff:bd:19:
1e:0d:a5:6b:a8:55:4e:04:fc:d6:7a:9c:3d:dc:f3:18:9a:84:
c3:a1:a2:55:66:58:45:96:66:29:15:43:2e:c2:87:9b:05:ae:
e6:3d:84:4a:58:be:e0:56:31:4e:d6:b8:9a:99:fc:c3:7a:08:
0e:95:6f:d9:74:35:d2:e2:d7:f2:44:10:3f:a1:18:81:26:e5:
ca:a6:96:06:ef:2c:02:ff:96:bd:40:6c:0a:42:3d:98:10:9b:
d7:0a:7f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:16:12 2025 by rpki-client