Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wvPozdMcgnmN3vk0AfKcfcqmr20.cer
File: wvPozdMcgnmN3vk0AfKcfcqmr20.cer (raw, json)
Hash identifier: XwZta8XwIakuvuTnMxE7olFyRJjVTKyiw0VBOFNmlWE=
Subject key identifier: C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01993400E0AC8C45AC932A3C4DE62DDD7118
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Sep 2025 14:21:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213432
IP: 193.33.244.0/24
IP: 2a14:26c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:00:e0:ac:8c:45:ac:93:2a:3c:4d:e6:2d:dd:71:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 14:21:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2f3e8cdd31c82798ddef93401f29c7dcaa6af6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:c6:07:80:75:00:62:fb:14:2d:15:25:03:
25:eb:0e:06:ae:d0:c2:0b:f1:86:a6:a3:e4:49:9a:
0b:4e:ee:93:9d:36:fb:e7:95:f7:91:e7:a7:ef:2a:
23:a7:d3:d5:6a:24:e7:82:e3:7f:89:64:45:5c:0e:
57:68:cc:a0:be:8b:24:f7:87:c3:9a:ec:75:da:fe:
0a:87:9c:c6:50:50:a9:ee:61:4f:fb:03:dc:3c:52:
24:35:dd:a4:dc:fd:42:f9:73:d7:ec:e4:c7:61:ae:
4d:38:f3:3f:e1:5b:81:67:3a:87:e7:03:8b:de:ae:
08:db:7b:15:bb:c5:c9:ed:06:ca:5a:39:89:ab:41:
f2:e5:e8:25:1c:50:45:f1:b0:c5:2c:b7:a4:d0:fb:
ca:9a:9b:c9:b1:1a:8f:aa:04:e2:b5:b3:7b:d1:c7:
18:8f:32:69:13:bf:88:86:b1:7a:33:ef:cc:a9:4b:
88:22:26:7a:d8:55:de:31:7c:5d:ed:f5:9b:96:3d:
bf:4c:d5:64:94:68:4d:d1:f2:fa:1b:34:6d:cc:f5:
75:34:99:42:a1:df:61:64:9e:71:b2:37:d3:c4:f5:
f3:e1:28:4f:29:73:89:00:04:46:af:0e:2b:4c:4e:
0d:aa:75:05:d3:81:47:7c:ce:a6:99:a6:84:51:0f:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F3:E8:CD:D3:1C:82:79:8D:DE:F9:34:01:F2:9C:7D:CA:A6:AF:6D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/dfb8f5-49af-4f48-893c-fc57440d448a/1/wvPozdMcgnmN3vk0AfKcfcqmr20.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.244.0/24
IPv6:
2a14:26c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213432
Signature Algorithm: sha256WithRSAEncryption
53:3a:cd:24:ce:44:c0:f9:85:c0:9b:58:60:54:88:cd:44:35:
d2:e7:49:1d:b6:6f:3c:b7:19:e3:c8:47:16:14:4c:76:0d:d0:
d3:d3:32:d1:db:7a:35:22:d8:88:4c:da:83:38:25:c3:1a:12:
c4:47:f9:90:69:f5:42:2e:c5:76:08:be:aa:1c:81:18:4b:7d:
64:de:3e:3b:03:b0:83:70:03:1d:ba:26:89:3a:ec:0b:cc:c3:
64:e0:89:4e:52:1a:16:7d:5d:e6:27:f7:ba:4e:a4:a6:82:68:
45:61:21:fd:9b:ba:66:da:5d:c2:f4:ab:c0:d0:8f:d6:44:b5:
1b:b6:31:63:68:4e:de:64:8c:25:df:bb:8d:12:9d:c4:ab:d7:
a6:b8:8e:ba:b0:0f:56:9f:dc:20:fd:57:15:f3:21:cd:38:24:
b8:e7:eb:e9:76:91:59:2c:3b:57:d9:2c:d7:36:f9:a1:09:3d:
5d:ec:81:e9:bb:77:a0:9c:f7:ba:63:2e:ea:29:90:5c:e0:c1:
f2:ba:c8:39:91:39:25:f1:91:f9:76:ca:10:9d:db:f5:ed:28:
bc:e7:42:e5:da:a5:e7:11:90:b3:7d:e4:d4:1e:d2:25:4e:e7:
4f:02:3c:bb:72:d2:81:b8:22:cd:41:92:26:48:d9:02:48:db:
73:a4:c3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:31:06 2025 by rpki-client