Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
File: wV59e7ae-ssMc5ApcsdNctKb938.cer (raw, json)
Hash identifier: ZvAWofg+lgO9ci1yrC6Iy/KeQ8yS5JqKe3sEUcBP/oE=
Subject key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01984FE8B285F344AA6EB7A8A000D47D0BB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Jul 2025 07:21:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56789
IP: 93.190.124.0/24
IP: 146.19.192.0/24
IP: 193.110.189.0/24
IP: 2a06:25c0::/29
IP: 2a09:4800::/29
IP: 2a0f:d440::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:e8:b2:85:f3:44:aa:6e:b7:a8:a0:00:d4:7d:0b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 28 07:21:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:bc:0e:16:86:b8:8e:9c:02:98:a7:f0:16:
80:e0:d6:d0:cd:f0:bc:de:c5:91:ef:eb:77:1b:97:
a7:36:db:ce:71:ed:f8:5c:bc:46:5e:e7:67:06:09:
c2:9f:7b:0b:43:01:17:4d:2d:73:d1:6f:be:b6:f3:
89:96:0f:fd:90:61:cd:01:b2:12:ed:41:71:09:72:
85:6b:14:94:bf:77:e5:ca:bd:41:7a:a3:f8:19:41:
dc:41:cd:80:f4:86:fc:51:35:b1:dc:33:eb:65:22:
c2:91:b0:d1:1a:cf:7a:55:13:83:02:6c:bf:b2:02:
ef:45:3b:dc:bf:18:2d:5f:9e:8d:27:07:2c:c2:50:
e2:4a:a8:9a:31:12:92:fc:dc:87:19:42:32:a1:4b:
a0:bf:ed:63:3c:18:6e:d6:b8:72:ba:0e:98:5f:ef:
8f:fe:f1:51:a4:a1:f9:59:b3:90:9e:52:2e:18:8f:
6d:a8:7d:f8:43:d5:b6:8d:54:87:e6:32:cd:ee:a0:
32:34:4e:1e:a4:91:39:54:95:3f:18:5e:28:1d:a0:
3e:cd:39:6c:d7:39:e1:1f:34:e7:e1:5c:1f:27:f7:
76:2f:83:18:d7:e2:bf:42:34:77:7d:28:80:13:e7:
1b:77:42:aa:d2:23:42:4f:d6:0e:18:ff:45:45:e4:
9a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.124.0/24
146.19.192.0/24
193.110.189.0/24
IPv6:
2a06:25c0::/29
2a09:4800::/29
2a0f:d440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56789
Signature Algorithm: sha256WithRSAEncryption
36:c6:85:57:69:4d:ad:d7:8f:57:aa:6c:5a:57:a0:07:1c:c8:
a5:fe:d2:bb:f2:73:e5:38:89:e4:f5:62:db:d2:0d:dc:52:ba:
b6:a0:63:05:f9:a7:61:38:49:60:ea:c4:c1:bf:3e:b5:51:6b:
04:6a:e4:25:c6:c0:63:ad:e5:1f:3b:d6:f2:e6:2b:bb:d9:0e:
7f:37:df:31:08:7b:3e:63:c1:e2:2b:a6:8d:f8:ca:ce:9c:1d:
03:8f:34:52:c8:de:e7:56:4f:ad:29:ec:6d:bb:40:97:6c:2e:
69:5b:45:81:4a:8c:ed:fa:a3:3f:04:77:cc:96:7c:2f:36:57:
30:b7:73:d4:2f:af:07:d8:87:e2:47:58:eb:c5:00:d6:15:ef:
db:6a:d5:50:80:87:2f:66:e8:03:af:9a:a5:ea:d5:80:e6:cc:
9e:f7:bb:0d:6d:02:0d:e9:4f:3e:2e:09:aa:a1:98:cc:84:d7:
c0:be:73:92:77:09:94:88:cf:08:56:36:1e:7b:42:f3:ba:db:
13:45:26:5c:17:a2:ff:1b:3b:01:50:b0:d6:90:e0:04:db:bc:
14:06:ff:51:86:f9:5c:e0:7e:e2:38:66:19:9d:2b:6f:89:ee:
a2:d9:a9:ba:85:b9:ef:0a:49:c7:ee:dc:23:84:f7:ac:30:9f:
9c:e3:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:42:58 2025 by rpki-client