Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/WjW8SBLsQrDyJl19lB7HcUB38c0.cer
File: WjW8SBLsQrDyJl19lB7HcUB38c0.cer (raw, json)
Hash identifier: 7lgzTQBdvfTEYTwNMF68ZRc6w+APnPp91zOkE5G7iUc=
Subject key identifier: 5A:35:BC:48:12:EC:42:B0:F2:26:5D:7D:94:1E:C7:71:40:77:F1:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A1D0A8F5029DD71363FC3F2D83CCC12154
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
CRL Distribution Point: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a5/060931-fa67-4378-93df-dd84a99db60c/1/WjW8SBLsQrDyJl19lB7HcUB38c0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a5/060931-fa67-4378-93df-dd84a99db60c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Nov 2026 16:48:16 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 192.108.48.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d0:a8:f5:02:9d:d7:13:63:fc:3f:2d:83:cc:c1:21:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 12 16:48:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a35bc4812ec42b0f2265d7d941ec7714077f1cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f8:c1:01:11:10:40:01:da:34:0d:e5:93:68:
9e:34:f5:97:33:d3:6a:23:17:93:03:c3:07:dd:af:
42:de:aa:ea:c1:28:88:26:77:70:ef:9d:67:e7:75:
31:06:6c:fb:97:59:c4:64:68:46:43:fb:20:e8:f2:
73:ab:85:07:ae:9f:d2:19:62:29:26:28:83:1e:7f:
0f:c0:4c:24:1f:5f:a9:a9:09:60:c6:00:18:c0:af:
65:55:ff:f6:4c:a9:65:6b:c6:b1:d0:dd:2b:8c:cb:
ff:90:09:a5:de:6e:60:33:79:52:c8:3f:6c:04:6b:
f2:8f:45:93:8d:09:ea:6c:5f:65:b9:8b:26:27:c9:
68:47:bc:fc:40:ab:47:ed:d0:49:ac:d7:72:9b:b1:
3a:b6:a9:b3:6d:f6:40:dd:2c:7c:90:23:e9:7f:4c:
72:9b:c4:ad:3a:b1:f6:9b:d1:06:ae:09:5b:cb:0a:
35:f9:60:ca:8d:16:b9:4c:4e:64:80:82:50:8b:86:
d6:3e:e3:12:8a:da:f0:d2:f6:3a:05:e3:43:8f:fd:
fd:08:b3:8c:05:82:fa:47:87:2e:de:d9:80:fb:5a:
c3:7d:2e:eb:f3:3e:40:43:98:c8:ea:70:d3:e6:d5:
39:a5:1e:8d:db:ef:bb:1c:bb:cd:0c:47:c8:5e:ae:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:35:BC:48:12:EC:42:B0:F2:26:5D:7D:94:1E:C7:71:40:77:F1:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060931-fa67-4378-93df-dd84a99db60c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060931-fa67-4378-93df-dd84a99db60c/1/WjW8SBLsQrDyJl19lB7HcUB38c0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.108.48.0/24
Signature Algorithm: sha256WithRSAEncryption
48:28:5f:ab:d0:b4:f0:c8:39:29:52:4d:a9:af:4a:42:dd:56:
b0:bb:34:21:d9:38:b4:53:3f:8c:99:64:c8:ef:35:f9:a2:7b:
81:76:65:5b:f5:d3:eb:f0:63:ea:33:36:a4:ed:8b:8e:d4:69:
c0:36:08:c8:41:75:7c:81:13:1d:94:d4:7c:ce:86:02:50:76:
15:8d:92:8c:f0:26:4c:71:21:da:1f:e5:44:15:f6:96:e6:93:
e5:fa:d4:a0:96:7d:6d:7f:f5:1d:45:71:7f:9f:e5:3d:fe:36:
c3:99:15:98:83:1b:2a:9f:26:ea:32:61:11:09:25:f1:b1:f8:
1d:c2:d5:da:c9:55:7e:8f:26:b4:89:e5:3d:88:76:9f:9f:71:
21:33:1d:20:50:86:b2:0c:5f:64:c4:68:ac:e4:fd:bb:8a:9d:
02:82:95:26:87:84:25:da:11:83:9f:bc:0d:bb:71:3c:ff:fc:
50:86:9e:92:4c:1f:88:d4:79:8d:dd:4b:99:6b:22:53:97:e2:
95:62:85:36:22:db:32:e3:a4:73:52:7a:45:ae:18:93:4a:e9:
3a:66:c9:48:2d:70:49:e1:3a:81:a9:28:d2:7e:9e:7d:78:e2:
75:c2:3a:e0:d2:14:52:a8:2a:e1:06:45:a9:38:1b:4e:99:1e:
37:b9:82:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:42:32 2026 by rpki-client