Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
File: VW22ld3zHiiYRm757fukiA2OGfs.cer (raw, json)
Hash identifier: 8PgmHqs0y76pNhdgyibGe99+W7Ya05nLhnTjuyJN4/s=
Subject key identifier: 55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0196691993E82203E8253D2F3305D5B13FD3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 24 Apr 2025 18:40:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a14:fc80::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:69:19:93:e8:22:03:e8:25:3d:2f:33:05:d5:b1:3f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 24 18:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:67:6c:f3:95:00:69:ea:10:db:d9:85:fa:ea:
65:b3:b9:b1:a5:03:10:c8:62:93:6d:3f:d2:a3:59:
87:bd:81:58:60:51:51:f2:17:e7:17:1e:bd:9f:78:
f4:71:6f:b5:27:13:e6:23:1a:ae:40:26:43:c3:0a:
55:f8:77:28:92:64:00:64:d3:92:84:84:9c:e6:56:
20:6b:0c:f4:29:f7:a0:3d:ba:60:e9:2f:66:36:84:
df:53:25:aa:9c:c4:73:25:bd:c9:04:49:ae:4f:a2:
1a:ac:d1:d0:09:29:42:b8:e8:be:98:5a:80:68:98:
0b:8c:dc:af:b0:1b:ff:fe:e4:7a:6e:6d:0e:1d:a4:
35:ce:f6:e2:dd:a5:95:69:a1:1a:e0:c0:fb:f3:99:
7e:02:bc:91:0b:b4:cc:ca:36:04:d9:22:51:2a:07:
89:97:e8:f6:1d:95:c8:30:aa:38:81:7c:89:1b:bc:
f4:6f:38:72:fa:c5:21:bf:f0:55:4c:13:31:fc:0d:
e8:ff:3c:3a:bf:60:f5:62:34:bf:e5:99:67:fd:1f:
34:f2:af:d4:f4:95:7c:0f:48:06:e1:51:55:f4:02:
9a:62:ba:82:67:f6:99:5d:08:da:2f:93:96:eb:a8:
66:d0:af:19:83:7c:11:59:17:f8:91:26:0a:4c:4a:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:fc80::/32
Signature Algorithm: sha256WithRSAEncryption
8f:80:96:f8:66:3d:aa:f5:16:a0:d3:3c:ef:94:2f:f4:ca:cd:
9e:62:c7:8d:40:56:1c:e6:24:75:67:b3:fb:75:7b:2a:7d:cc:
17:f9:bd:33:07:79:9f:33:fb:cc:38:67:11:e2:80:be:c5:3a:
e7:26:5d:9e:66:a0:07:e7:ca:b0:ac:f3:d8:7e:03:5c:18:4d:
39:ae:52:1a:fd:e0:54:44:1c:90:85:6c:c3:64:76:e3:19:8f:
e8:0a:bb:88:73:5b:50:5e:70:dc:c6:92:da:cb:89:78:8e:a2:
07:d6:0d:6d:fb:d0:73:cb:18:d6:7b:3f:6f:34:61:6b:e7:f4:
7c:f2:93:4a:c8:a5:bf:30:e9:64:52:ae:1c:3a:44:f8:7f:80:
fd:d3:e0:61:be:9d:1c:97:05:5a:3e:7c:18:58:fc:5a:c2:fa:
7b:19:6a:2e:b1:5e:00:22:71:9a:e3:2d:7d:4d:fc:da:4a:57:
2b:64:f7:6e:61:06:98:56:5b:c9:07:22:93:07:f6:25:9f:77:
8a:e2:09:3b:ab:8c:07:4e:e5:cf:e4:d2:11:08:78:9e:a5:92:
cb:54:cd:7a:86:1a:d1:77:73:19:1c:b5:68:f8:81:78:77:1b:
92:2e:90:e5:1c:7f:71:b1:e0:1e:b2:12:18:91:c2:21:2f:5a:
d8:4f:d2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 22:02:17 2025 by rpki-client