Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
File: wHCBpvcho3qeHXmTFbs-onWLiHc.cer (raw, json)
Hash identifier: sQEsbeuk9ZhNNShwxEJeEkLToYFSYso8vQNW56kr3gg=
Subject key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01979CD83F0283FDCB50CE981196463928CA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 23 Jun 2025 12:51:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209531
AS: 215798
IP: 147.78.168.0/22
IP: 194.110.119.0/24
IP: 2a09:27c0::/29
IP: 2a14:5980::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9c:d8:3f:02:83:fd:cb:50:ce:98:11:96:46:39:28:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 23 12:51:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:77:c0:ef:82:18:f4:a2:d0:28:67:8c:de:
bd:02:01:7e:ba:e1:95:ba:e3:cd:99:69:81:f0:6f:
a2:35:f8:40:a1:00:e8:5c:ba:49:b1:17:8f:2d:67:
34:46:cb:c5:29:24:ef:f9:db:63:0b:2b:b7:9a:68:
7d:7b:c3:dd:2f:f3:65:0c:b0:b1:65:5b:93:3a:89:
76:18:f1:a1:cf:ec:f3:d6:ee:44:e4:a4:37:8e:03:
57:98:1c:83:ab:80:65:86:8d:15:cc:1d:2e:9a:c3:
37:37:65:b5:b7:e8:12:11:3c:ee:bb:55:ed:e9:e5:
8c:04:dc:b9:7b:4d:c2:6e:5c:76:f8:1d:83:8e:00:
59:7a:dd:41:57:73:25:ea:1e:fe:43:dc:89:03:2e:
a8:34:03:a0:5f:86:46:27:8a:55:c5:e7:72:79:8a:
be:fb:aa:f1:2d:73:4e:f1:86:d7:11:6b:47:ba:88:
32:5b:83:89:0e:0a:cc:9f:2c:b6:25:14:31:aa:bd:
a0:32:17:3c:a0:4f:2c:9f:45:a0:69:3f:d1:50:a4:
2b:f1:e5:e8:d9:c1:a3:84:01:1a:35:0f:09:86:7c:
01:24:92:fd:85:4d:c5:0d:d5:ce:5a:9c:94:e7:06:
94:e9:40:62:a9:5b:ee:43:4c:46:3f:f1:d0:d5:14:
b7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.168.0/22
194.110.119.0/24
IPv6:
2a09:27c0::/29
2a14:5980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209531
215798
Signature Algorithm: sha256WithRSAEncryption
34:aa:88:72:12:22:01:d4:1c:f5:45:fc:ad:50:5a:a0:57:c6:
9c:cb:a8:65:a2:bd:a3:ae:e0:cd:3c:3a:33:23:68:ec:c0:24:
46:73:72:04:89:6b:e4:5f:30:46:ac:ea:6b:e7:c4:b3:d6:32:
e9:52:21:cb:6d:cd:aa:5a:1b:fd:af:36:99:29:56:eb:ea:61:
78:98:8c:d3:51:e7:c8:63:77:b4:1a:96:66:1c:ba:c3:bf:de:
19:1a:ad:a7:55:d2:ae:a6:17:30:51:54:05:04:ca:0d:d1:f7:
40:30:5e:e8:ce:71:cf:87:a6:f1:df:54:58:bc:26:3b:fd:c9:
75:cc:d4:e8:c7:db:f6:52:5e:29:b1:67:d7:4c:da:59:33:dd:
6b:e0:29:ae:c6:ef:79:92:f7:6e:d8:88:bd:86:81:42:16:37:
ff:91:9f:6c:bc:17:ef:7b:84:7e:7c:7f:52:00:d6:65:ea:3b:
61:40:16:38:d8:e5:94:8b:da:4d:a8:dc:7f:d4:fe:3c:e7:1e:
ff:b8:3d:b1:39:37:ae:c9:21:5a:0d:19:6a:8e:bf:46:0b:ab:
09:16:96:a9:d2:05:a7:f4:f5:bb:2f:04:cf:7e:09:08:7b:ec:
c2:63:a6:63:22:f8:e4:e7:38:92:a4:97:04:72:b0:c4:62:58:
14:5e:e8:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 17:08:57 2025 by rpki-client