Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
File: VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer (raw, json)
Hash identifier: 0pZUQkM6HzgX5FwPJfQSoW5Tgm3b8WBAKEx9JItDXTw=
Subject key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01977D4C5AEB5606ECE042E30E909E12894B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 17 Jun 2025 09:50:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.188.15.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:4c:5a:eb:56:06:ec:e0:42:e3:0e:90:9e:12:89:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 17 09:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:bc:09:c7:ba:89:90:ad:3d:94:70:be:0f:
49:47:48:f0:14:46:17:ab:3b:f1:dd:56:68:df:76:
50:e5:30:7b:4b:12:28:1d:2e:31:9b:f3:71:0f:fb:
f3:88:dd:24:1d:39:25:e8:fe:67:26:e1:95:cf:a9:
70:c2:8f:0a:eb:1a:8b:ba:b5:77:69:0a:78:dd:f8:
5b:f2:6f:3b:df:2b:9e:6f:99:9e:8d:df:43:89:28:
55:75:84:27:53:6e:cb:92:90:fc:5c:e5:b3:8d:4d:
83:c8:72:52:51:45:8f:42:f4:6d:5d:2e:7d:7c:51:
01:2d:25:3a:ab:aa:d8:00:bc:1a:98:51:88:11:3a:
e8:9b:e1:b9:bd:20:86:97:c8:6b:97:be:cd:07:ab:
42:be:fe:b7:22:2d:2e:28:e1:99:ed:79:87:fd:d1:
d7:03:93:98:18:e3:ea:d3:f6:95:cb:23:27:bb:d1:
04:43:79:ee:aa:35:a6:bc:c3:8b:b8:e2:80:ad:c7:
05:b0:ca:10:e5:07:0e:83:c6:5d:a8:fc:3c:d0:0b:
a2:9b:67:ff:74:58:37:82:2a:f3:f3:8c:8b:c6:77:
d3:df:5d:07:a3:be:18:f8:d2:24:9c:94:6e:58:f7:
e2:70:8a:35:d7:17:58:61:9d:1b:cd:43:37:42:99:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.15.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b9:17:7b:b1:df:39:2c:99:4a:e3:7f:99:57:f8:ae:62:d4:
2b:36:4e:62:fe:ea:07:a1:ba:ac:99:60:61:58:14:79:40:b1:
ed:29:52:8a:00:a8:a4:7f:a4:6a:fb:c8:90:66:b5:da:ee:a7:
78:13:08:a5:71:e5:93:80:69:4d:0e:fb:da:e4:28:0d:2f:bd:
5c:75:80:06:44:52:5b:71:2a:27:18:df:36:92:9e:00:07:3e:
54:e7:c8:a6:84:00:35:46:b6:2b:0e:ba:56:48:fe:41:bc:68:
e2:22:f2:df:86:92:b9:5d:76:ef:c1:63:56:c1:b6:1f:55:e0:
47:3a:76:f5:77:f7:4a:d0:93:19:73:7f:64:1f:64:53:2b:56:
a0:29:73:d7:24:49:ac:1b:bf:5c:70:24:1a:8e:0e:5a:86:52:
33:56:b1:2f:06:0d:f7:db:28:65:39:dc:34:41:95:49:76:06:
29:ca:8c:41:26:05:ba:aa:0a:cb:ae:00:02:38:eb:0e:fe:d1:
15:b6:aa:d9:d7:20:77:89:d5:03:92:64:df:1d:7f:3b:20:73:
66:f8:07:40:84:15:75:b8:d4:96:2d:34:5e:b5:b3:72:cd:a3:
b4:5b:99:48:f5:16:b7:71:51:32:93:38:be:37:32:fd:d3:5e:
1f:1c:1c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 15:45:01 2025 by rpki-client