Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wPQvc_8rzEiFsSAL0C7n4p9gjis.cer
File: wPQvc_8rzEiFsSAL0C7n4p9gjis.cer (raw, json)
Hash identifier: l6upRXs5F6pzvY7cbnbEf50patMm24wHif8a5sjCPcM=
Subject key identifier: C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0197640B48747CBFDE14BC12482CCC7D4BF3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 12 Jun 2025 12:09:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197662
IP: 91.223.240.0/24
IP: 185.74.200.0/22
IP: 2a03:49a0::/32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:0b:48:74:7c:bf:de:14:bc:12:48:2c:cc:7d:4b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 12 12:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0f42f73ff2bcc4885b1200bd02ee7e29f608e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:09:22:00:12:c1:22:58:47:93:54:cc:3f:
5a:f6:ae:d8:20:99:ff:08:1a:ac:5c:87:a4:d6:6c:
e4:af:a2:10:4a:3b:ea:94:01:ad:95:7f:e8:f7:f1:
94:b6:0e:68:e6:2f:a1:c1:34:b0:a1:f6:cf:38:81:
2a:4f:0c:f7:88:d1:aa:ed:31:ec:bc:8c:b6:d6:58:
e3:46:c6:62:3c:2b:99:a6:a1:08:62:21:d6:b2:e6:
75:aa:6d:0b:dd:6f:a3:d0:f8:9b:25:c6:20:59:13:
e1:8b:b6:fc:78:68:8a:b8:a0:77:07:bf:8f:64:ee:
31:14:af:35:85:1b:e7:c7:16:af:4d:78:e1:2d:0f:
f8:c0:28:4a:bb:8a:b6:bb:87:b5:5a:5a:85:74:1c:
72:18:73:c8:13:b8:90:81:03:75:2f:5c:51:03:de:
fb:5d:af:d6:d8:8c:5d:33:07:1f:e1:74:5a:0a:7a:
7a:11:df:a9:66:0d:3c:01:90:42:48:ed:b8:27:22:
86:1a:36:92:54:75:4f:d9:82:dc:18:eb:4a:f7:58:
2f:df:ee:af:3c:ea:fc:32:82:19:82:7d:28:a9:03:
48:52:e9:ac:2a:65:a3:8a:07:6b:d2:8b:15:34:a8:
61:6b:54:ed:c0:08:41:60:83:ea:07:2c:c7:44:92:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F4:2F:73:FF:2B:CC:48:85:B1:20:0B:D0:2E:E7:E2:9F:60:8E:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/59f895-5c50-436a-9707-7dd57e736746/1/wPQvc_8rzEiFsSAL0C7n4p9gjis.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.240.0/24
185.74.200.0/22
IPv6:
2a03:49a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197662
Signature Algorithm: sha256WithRSAEncryption
ad:21:90:81:fd:06:b8:e5:30:bf:7b:58:7a:00:59:e8:d6:ce:
e2:2f:24:f8:0d:c6:ff:79:72:94:b0:fb:b3:ad:bf:a0:1d:0e:
12:51:31:74:30:8a:c3:fc:21:45:fa:08:39:24:c6:7f:6e:a2:
f9:bc:db:54:96:11:c3:11:6c:e7:03:af:e6:1e:ff:27:8f:49:
92:43:3e:85:73:76:ea:78:50:ff:7f:24:17:d6:36:15:b1:83:
01:99:95:f2:f8:ee:ea:76:9b:08:39:39:ca:ac:86:44:6e:21:
70:4e:14:44:78:49:65:84:08:51:a3:a2:c6:cb:9a:14:9e:00:
df:44:bb:d8:14:1c:9c:4d:b9:e9:f6:99:d0:a7:68:43:a2:34:
95:87:93:b0:ca:94:ff:29:e9:14:54:07:8d:c4:57:b5:5b:4a:
a3:7f:2d:a4:83:42:7d:54:15:f9:69:e2:16:d7:d5:17:45:78:
6b:70:8d:7d:90:71:8f:69:45:85:f2:ae:9d:6f:4b:d5:d1:84:
b7:04:6b:dd:76:b5:64:fa:50:68:14:51:70:22:7c:89:e5:30:
08:bf:f1:30:e0:0c:4b:fc:d6:26:a6:a1:66:7d:51:0b:8e:30:
c2:00:c8:14:08:79:4e:7a:f3:37:40:3d:e3:be:0c:e3:69:53:
af:bf:50:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 16:33:45 2025 by rpki-client