Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
File: wV59e7ae-ssMc5ApcsdNctKb938.cer (raw, json)
Hash identifier: 04F22OSMm29p7I0hgsvltA+I6q54R4RlHRA7orP7CrI=
Subject key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A135417045E59C56D56C18BAF1B444D42E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 13 Oct 2026 12:34:03 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 56789
IP: 2a09:4800::/29
IP: 2a0f:d440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:41:70:45:e5:9c:56:d5:6c:18:ba:f1:b4:44:d4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 13 12:34:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:bc:0e:16:86:b8:8e:9c:02:98:a7:f0:16:
80:e0:d6:d0:cd:f0:bc:de:c5:91:ef:eb:77:1b:97:
a7:36:db:ce:71:ed:f8:5c:bc:46:5e:e7:67:06:09:
c2:9f:7b:0b:43:01:17:4d:2d:73:d1:6f:be:b6:f3:
89:96:0f:fd:90:61:cd:01:b2:12:ed:41:71:09:72:
85:6b:14:94:bf:77:e5:ca:bd:41:7a:a3:f8:19:41:
dc:41:cd:80:f4:86:fc:51:35:b1:dc:33:eb:65:22:
c2:91:b0:d1:1a:cf:7a:55:13:83:02:6c:bf:b2:02:
ef:45:3b:dc:bf:18:2d:5f:9e:8d:27:07:2c:c2:50:
e2:4a:a8:9a:31:12:92:fc:dc:87:19:42:32:a1:4b:
a0:bf:ed:63:3c:18:6e:d6:b8:72:ba:0e:98:5f:ef:
8f:fe:f1:51:a4:a1:f9:59:b3:90:9e:52:2e:18:8f:
6d:a8:7d:f8:43:d5:b6:8d:54:87:e6:32:cd:ee:a0:
32:34:4e:1e:a4:91:39:54:95:3f:18:5e:28:1d:a0:
3e:cd:39:6c:d7:39:e1:1f:34:e7:e1:5c:1f:27:f7:
76:2f:83:18:d7:e2:bf:42:34:77:7d:28:80:13:e7:
1b:77:42:aa:d2:23:42:4f:d6:0e:18:ff:45:45:e4:
9a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:4800::/29
2a0f:d440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56789
Signature Algorithm: sha256WithRSAEncryption
a7:88:c5:46:13:ad:c0:78:84:7a:55:5f:27:98:fc:cb:ff:9d:
75:df:71:23:dc:11:4e:46:7d:a8:ed:2e:c6:63:c3:7d:a5:ad:
03:53:ab:0a:46:3b:b0:1e:d8:c5:c9:ca:f2:cd:cc:81:f5:d0:
b9:5d:a8:75:27:f7:d0:04:64:47:4b:b0:71:91:91:de:ac:1c:
ba:5d:be:9a:02:df:47:19:ed:68:20:c8:db:d4:df:b7:03:38:
28:2b:63:4e:c0:bc:99:5b:50:08:38:2e:cc:18:28:c1:d6:36:
0a:5e:b4:1f:5a:bf:55:da:8a:c4:64:a1:c0:d0:82:f8:3d:04:
57:44:e1:01:ec:e8:13:da:ca:8a:80:3c:11:66:d3:77:cd:5f:
43:41:6e:60:70:b0:ca:37:8d:8a:3f:92:c0:dd:44:ef:b2:bf:
d5:35:aa:f3:18:11:31:2d:51:e9:39:fd:1a:b3:fb:f5:e7:d4:
3a:99:e8:74:2d:52:cd:97:56:11:b1:b1:61:21:ab:81:1d:b4:
76:5c:fa:16:2d:e0:5c:55:6b:f3:35:19:c6:ed:f8:e3:c4:10:
33:fb:5c:cb:14:ec:cc:07:79:db:85:54:ef:eb:c9:52:07:d2:
e4:67:01:7c:5b:f5:57:18:2e:6b:7b:20:d4:93:a8:78:bb:ae:
dd:7d:06:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:10:25 2026 by rpki-client