Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer
File: wU8FvBj1O4D8KcCtGyg4kr3-Ns8.cer (raw, json)
Hash identifier: WO9wmoC4t9MuqpzQJuKeT7OIk/u88F50GiZ27dyP87c=
Subject key identifier: C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01967BA6BEBED9B23D22F5039E3F4854B4BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 28 Apr 2025 09:07:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51147
IP: 195.54.176.0/23
IP: 2001:67c:205c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:a6:be:be:d9:b2:3d:22:f5:03:9e:3f:48:54:b4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 28 09:07:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c14f05bc18f53b80fc29c0ad1b283892bdfe36cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4d:e5:7d:9a:84:ba:03:de:51:f7:eb:ee:53:
53:0f:66:1d:a7:ad:37:e8:0b:44:d9:fa:14:86:f4:
32:67:9c:18:26:5b:8f:f9:9c:f7:af:71:bb:6f:98:
61:47:9d:ee:c1:5e:fd:95:18:09:ac:70:53:06:bf:
cc:03:98:50:ee:fe:af:8e:31:49:75:31:f3:88:9e:
46:5c:52:0c:c1:b7:e7:c9:cd:2f:8a:40:f3:e7:76:
36:ef:3c:73:00:3a:ab:4e:c7:e0:41:70:9c:33:7c:
80:d7:61:a9:fd:79:65:5b:d7:46:97:ee:5d:84:78:
0a:9f:ff:c8:31:8e:f5:76:12:94:fb:c3:da:2b:0d:
4f:fe:e0:d5:31:5b:5b:7e:2d:98:65:67:5e:66:e9:
0d:a8:29:63:09:bc:01:49:3f:73:41:c9:93:60:3f:
5c:e1:02:1a:3a:11:19:80:87:a1:f5:2c:25:fe:12:
3c:de:4a:a9:8d:07:9a:0d:c1:18:02:96:c4:60:c7:
62:8c:84:d9:72:02:3d:e8:eb:eb:65:76:1d:6d:0d:
83:6b:97:c4:72:6e:a7:cc:4e:fc:66:aa:dc:fe:e3:
9a:af:eb:38:23:f0:76:47:92:61:9f:e1:d1:f8:8f:
e3:8f:df:27:45:8f:79:5b:75:ef:42:d3:64:2a:92:
69:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4F:05:BC:18:F5:3B:80:FC:29:C0:AD:1B:28:38:92:BD:FE:36:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/efc0bd-3ccb-47b5-8d34-24763011d024/1/wU8FvBj1O4D8KcCtGyg4kr3-Ns8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.54.176.0/23
IPv6:
2001:67c:205c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51147
Signature Algorithm: sha256WithRSAEncryption
9b:34:b0:0c:19:4a:8f:57:ac:d2:f7:63:a6:ee:e5:b5:1a:f2:
fd:fc:70:9f:11:e3:f2:13:b6:1e:02:36:98:92:a7:d0:06:b9:
9a:4b:f5:ab:3f:57:de:1a:03:46:04:b1:68:c9:ae:6d:3d:08:
f9:73:87:ba:bd:34:81:67:63:73:ce:9c:46:e9:08:99:be:91:
d1:d5:db:46:68:71:57:ac:81:5a:81:11:6f:92:14:f2:24:aa:
b0:86:cd:8f:b8:41:b6:03:d9:d9:27:8a:46:ed:34:08:4f:5c:
42:b4:cf:1b:ce:b7:11:42:d7:29:d4:f5:4d:d1:88:bf:56:a4:
79:1c:ea:66:9f:07:c9:36:b2:40:71:d6:40:09:b7:51:98:85:
9a:0e:a1:e2:05:2a:d7:9f:4a:4d:8b:91:f8:9f:9f:a3:4d:5c:
6a:7c:81:6d:ca:96:67:af:20:db:9b:86:66:2c:06:ec:dc:af:
8a:19:66:d8:e7:3a:d1:44:6b:33:74:37:24:a2:b8:43:4a:5a:
99:c3:62:b7:c9:c1:00:c0:37:cf:f1:a4:ef:dd:62:6d:3c:93:
88:d8:55:38:2b:6d:ab:ee:77:84:cb:76:98:2b:1f:04:1b:52:
00:ad:8f:2b:71:cf:bd:b3:3a:b6:77:6e:b5:aa:58:75:b7:bd:
d1:3d:af:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 18:12:50 2025 by rpki-client