Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/gWsWnRn6OVDRRdWEr6YXAfzatdE.cer
File: gWsWnRn6OVDRRdWEr6YXAfzatdE.cer (raw, json)
Hash identifier: Up92YTSy0UP39vhbtDayprQVMnltbMjrnAAFk8vXe94=
Subject key identifier: 81:6B:16:9D:19:FA:39:50:D1:45:D5:84:AF:A6:17:01:FC:DA:B5:D1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18F98EBF788544AF11067DB2A58353AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:40:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 147.252.0.0/16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:f9:8e:bf:78:85:44:af:11:06:7d:b2:a5:83:53:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:40:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=816b169d19fa3950d145d584afa61701fcdab5d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5f:42:ed:67:5e:11:ed:60:b8:09:ae:53:51:
82:57:a8:a2:7c:b0:cf:ab:f9:7c:b7:92:24:bb:e4:
e5:c6:fa:07:26:1b:a5:93:76:8d:1d:58:da:a1:61:
94:6f:26:0c:9e:ab:c2:52:19:26:6b:e5:8d:6d:ee:
69:28:7e:a0:d5:e9:e3:a6:ea:ac:ff:69:0e:87:e4:
eb:fc:a7:cb:df:72:e4:75:38:5c:5d:03:ff:60:39:
7b:8e:bf:29:72:b5:1b:10:b1:c9:9f:f1:42:c8:78:
d9:e4:0b:bf:4e:ab:a3:5b:a9:8b:56:ad:1b:28:29:
d7:23:4f:eb:b7:5c:62:d4:ea:a9:5d:dd:07:e4:12:
0f:a6:10:63:9c:a5:ae:47:5d:45:89:f1:ea:ea:13:
95:1b:5f:04:39:8f:e2:69:67:a8:b9:79:01:05:f6:
e1:31:e2:19:62:26:ec:72:95:d0:97:fb:fa:50:d0:
56:b4:b2:1e:94:a8:86:00:6d:8e:9e:e9:10:9e:16:
bd:1d:91:17:4a:7c:d8:31:68:67:9d:a1:88:8d:d4:
af:34:b0:41:4d:dc:9e:1a:20:a1:1f:e1:3d:99:0f:
77:e9:f1:6a:95:2c:aa:46:07:e9:c5:0f:ce:35:de:
25:09:ad:1c:13:fd:5d:82:7f:f6:ce:33:99:cd:a6:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6B:16:9D:19:FA:39:50:D1:45:D5:84:AF:A6:17:01:FC:DA:B5:D1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/gWsWnRn6OVDRRdWEr6YXAfzatdE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.252.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:fd:7f:6f:0b:51:27:5e:01:8e:eb:8c:bb:da:ba:bc:aa:f2:
ea:db:f6:94:98:a8:b9:98:f4:cc:8c:1e:99:ce:c3:cc:a5:3b:
07:c5:5e:c7:11:1e:02:43:6d:10:2c:1e:02:78:9c:0c:32:42:
ca:83:1d:09:0a:74:de:fb:6e:e1:5a:d5:c4:89:62:7a:a5:4f:
63:ec:5c:3d:da:54:12:40:4e:ef:a4:02:8d:93:a1:74:e2:b7:
2e:4a:24:77:bc:ee:6c:44:bb:72:79:8e:c0:8f:6c:ca:96:14:
cd:99:65:fe:45:09:3f:22:9c:58:77:51:eb:e1:95:92:b0:b4:
00:44:79:5d:a2:19:ba:d7:8f:90:e7:c8:6c:c4:99:57:eb:78:
34:8d:40:99:aa:7e:a9:87:95:00:64:59:bd:f9:08:b3:da:0a:
03:09:bf:7a:38:cd:93:ec:e4:26:ad:2c:88:cf:73:b1:be:7e:
e0:47:94:ce:fb:3b:3e:22:d0:9b:f1:18:b5:89:5d:b3:ad:77:
df:ce:78:6c:80:08:9c:b6:68:18:bf:76:a4:24:d0:d8:43:3a:
f3:08:62:f1:b0:38:dd:cd:19:60:a8:33:ae:70:fa:c3:77:19:
8f:12:16:98:9b:3a:4e:9f:86:3b:23:6b:35:45:4b:44:11:4b:
36:33:2f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:06 2026 by rpki-client