
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
File: VWEKWd3_vSTuSymemySxvwNvjkM.cer (raw, json)
Hash identifier: d0eliLpIjBESLZp0Uy+aTSgiwQd5fyufoX32gfhowjc=
Subject key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198AD03B8D269A609BEF48771B82A80F7E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 15 Aug 2025 09:15:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.18.11.0/24
IP: 195.234.93.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ad:03:b8:d2:69:a6:09:be:f4:87:71:b8:2a:80:f7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 15 09:15:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:f1:95:f4:81:7a:1e:07:89:e8:8b:40:b4:
0e:78:a7:93:fe:7e:31:fc:dd:f7:14:8d:e3:8c:22:
5f:60:4d:0c:3a:47:24:07:93:f2:1d:e2:bc:ad:2f:
d0:47:38:1d:31:05:11:26:02:b8:94:cb:a4:fd:ac:
52:9c:c8:05:7b:fc:74:fe:97:39:5c:fa:b7:80:c8:
96:8d:52:ee:23:cb:97:ae:f3:ef:29:d5:09:18:9b:
11:9f:52:a6:e8:cb:44:26:b0:0f:b0:10:b4:fa:4c:
80:c3:b6:47:c2:11:18:02:1c:c8:da:33:0b:69:d6:
18:c7:ea:17:05:7c:3e:f9:25:d4:86:ed:3f:cd:89:
a9:b5:05:65:98:08:75:ba:77:a1:2f:6b:ad:35:a3:
af:08:44:b0:84:39:f5:de:4e:45:99:4e:3c:85:11:
f7:07:4b:80:d0:77:e3:49:ee:9f:04:42:ad:97:79:
a7:a4:4c:06:e4:d0:77:f7:01:3c:36:36:60:31:62:
11:02:60:7d:08:69:76:a7:e0:46:4b:95:ec:8e:09:
77:0b:89:37:39:24:a0:a3:65:56:c0:4b:4b:d0:b1:
08:5a:12:c5:ba:4f:54:ca:2f:08:72:a1:c0:c1:d9:
d5:4e:40:49:7b:2e:75:d9:ed:1d:14:a9:3f:5b:c4:
da:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.18.11.0/24
195.234.93.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d3:d1:ff:cb:c6:13:f4:c0:0a:7c:f5:33:8a:9b:c8:f1:57:
da:43:10:95:b1:8b:23:09:a3:19:5e:f8:e4:ea:6c:ae:8f:9b:
46:d9:22:24:37:15:8f:b3:5a:26:24:2a:2a:d4:7f:bf:0d:87:
75:8b:8b:55:14:eb:9c:5a:93:cd:64:aa:19:7e:1c:e3:58:4e:
49:77:c4:03:4b:42:63:e5:3b:41:ef:39:07:b4:44:90:88:c9:
30:ee:b3:7d:15:0f:b7:ba:5c:16:e7:a8:11:01:b2:18:64:1a:
b9:e3:82:9b:4c:c7:5c:63:2b:f2:6b:be:46:79:88:ae:21:44:
ef:6f:e7:33:b3:06:87:4c:05:2f:92:07:5f:b5:35:26:30:56:
c3:cf:cb:dc:cf:38:e0:81:47:c7:fb:07:b3:60:08:7f:26:fb:
c3:f1:56:fd:20:9b:bc:9c:81:3a:00:d8:b8:b5:61:3c:30:81:
98:56:76:2c:56:b6:02:bf:f1:dd:58:9d:66:1e:f2:6e:aa:76:
28:24:1c:00:e9:7b:f2:14:46:1f:f0:26:df:a3:a6:86:d4:96:
fb:f7:c5:66:93:6f:d1:99:77:af:8b:fe:a4:7d:d4:d7:3a:4c:
d9:26:7c:5b:2b:1c:07:42:c3:ae:45:bd:40:94:a7:2c:05:0f:
c5:09:55:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:52:16 2025 by rpki-client