Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer
File: JwMveQIwUhAMQ5PJ5pD5fXiWkm8.cer (raw, json)
Hash identifier: S51+nRmqUzNOIMo6/1OsfHur6q8AoK8GdJUAkqvY7wQ=
Subject key identifier: 27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B76EB03C3E26573428F8F612FE45881D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 00:17:52 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 206161
IP: 2001:678:c88::/48
IP: 2001:678:10f4::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:76:eb:03:c3:e2:65:73:42:8f:8f:61:2f:e4:58:81:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 00:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=27032f79023052100c4393c9e690f97d7896926f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:1c:fe:62:bb:33:50:66:93:e7:69:e2:04:
7a:9f:53:9e:0a:e8:63:55:ef:5c:13:84:55:65:81:
cf:3b:be:cb:5c:67:62:49:83:bc:62:44:1f:c5:90:
1a:92:d6:d9:a9:d8:1f:ba:63:77:53:58:a7:a3:c1:
6c:02:8d:a4:06:d0:61:e7:98:f2:60:8a:ed:a3:4e:
44:a2:6f:17:0e:ae:2b:bc:e4:68:bf:b8:bf:43:9f:
4d:c3:3b:22:d2:16:72:05:f2:c0:96:3a:a9:06:1c:
4f:55:68:0d:af:ff:a4:ca:06:73:b6:37:8d:30:70:
c1:dd:d9:c6:bf:5c:b4:e4:99:17:ea:bc:2b:71:d5:
81:1d:1b:d6:f0:c7:38:d9:3a:6b:db:20:e5:25:c6:
f3:66:46:42:94:7a:68:f6:59:92:9c:92:c5:d8:0b:
18:80:56:a0:3a:7f:b5:86:6d:18:78:ec:5c:e4:a7:
da:3f:de:5a:4f:6b:d7:30:c1:74:af:d4:c8:d3:4f:
3d:41:86:dd:c6:d5:4f:f5:62:99:33:8e:b7:29:ec:
e4:f2:03:e6:75:34:ae:52:a5:90:81:fb:54:57:c3:
2d:4f:be:82:19:00:e0:04:87:6c:5c:a9:1b:a8:c0:
08:48:d9:0c:10:49:45:dd:c9:11:a0:59:ad:d0:b0:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:03:2F:79:02:30:52:10:0C:43:93:C9:E6:90:F9:7D:78:96:92:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f4ff52-64ba-420b-bff4-f07dd2606267/1/JwMveQIwUhAMQ5PJ5pD5fXiWkm8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:c88::/48
2001:678:10f4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206161
Signature Algorithm: sha256WithRSAEncryption
65:9a:36:80:05:d1:e8:48:46:97:27:6c:ac:f8:65:e3:c8:4b:
21:b4:b8:f9:14:f8:fc:73:f2:22:82:dd:df:55:e9:82:e6:ac:
bf:1f:50:0e:6b:6c:5c:05:fb:a7:77:2a:e2:c2:c6:1e:e3:93:
55:48:70:02:c2:d8:95:7a:01:97:2d:b2:e3:19:b8:84:f7:e8:
ca:50:6e:f0:d6:12:5b:5a:e3:02:bf:5d:c7:63:1c:9d:3d:8e:
1f:81:ec:25:23:2d:1c:e8:c8:f3:0d:22:91:4a:d6:96:58:c3:
c9:10:f6:cb:17:33:24:ac:dc:32:bc:56:7f:ac:d6:8b:4f:25:
0b:19:80:44:af:11:17:ec:c1:20:64:8f:f6:29:10:e1:4b:3f:
a5:2f:8f:52:a7:e9:f9:7d:b0:d7:86:f8:68:d7:84:3e:7a:9a:
37:e7:4d:da:a0:a5:c9:ce:8a:03:ab:a2:76:8b:20:3c:c9:1d:
b4:80:ec:36:02:fa:6b:5a:b7:da:46:0e:23:d8:ad:68:55:81:
dd:c4:23:a8:5d:78:a4:6f:4b:bd:d6:b1:6a:ce:bd:43:c0:90:
54:97:f4:b5:f6:4e:4d:49:73:f7:9a:cc:08:15:2a:d1:11:49:
9e:c3:41:4d:1a:cd:c9:6f:32:fb:5a:1c:fd:b5:48:94:ef:a6:
d5:9b:32:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:04:35 2026 by rpki-client