Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mx6IYwjzvKMivU7s6ogmdxPFzqw.cer
File: mx6IYwjzvKMivU7s6ogmdxPFzqw.cer (raw, json)
Hash identifier: cGrDQ5Awc1q7Cyto6+yA9DArw0rk2kN+cXiF8xLb+mE=
Subject key identifier: 9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198390DB1C5E43AE1A23F601A16FF8E666E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 23 Jul 2025 20:50:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214809
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:0d:b1:c5:e4:3a:e1:a2:3f:60:1a:16:ff:8e:66:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 23 20:50:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b1e886308f3bca322bd4eecea88267713c5ceac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:4e:4f:32:dd:eb:ab:5b:00:5f:62:95:fb:
92:21:f1:71:04:61:9a:49:8b:aa:34:a7:ae:cf:79:
59:75:e6:d7:bf:3c:24:eb:05:f6:85:f3:ca:81:93:
22:cc:ac:e8:fe:e8:0f:df:5d:5c:c0:d7:9f:37:c6:
66:9a:1a:57:d0:0b:d0:f8:2d:0f:3b:3f:f6:dc:82:
b3:8d:97:42:90:bc:05:a6:63:c6:d9:60:07:b2:5d:
d7:c2:af:67:08:e0:2d:02:06:e4:01:27:3c:2c:9b:
3d:c4:32:ad:05:df:f3:7d:34:6a:69:13:6c:ad:e9:
81:bc:e7:25:a8:39:7d:f3:fd:98:e3:fe:91:db:6f:
06:a9:db:20:68:90:ec:f6:4e:b3:d7:36:0f:7a:0d:
d4:e6:c8:97:01:bb:ee:ad:d3:9d:a1:2d:83:28:81:
2d:70:76:78:27:09:a0:5f:4f:ec:0e:56:f8:84:ae:
ac:0f:ed:1b:81:06:72:dd:0d:66:29:66:a0:4b:58:
84:4a:3b:23:f7:63:58:d6:9f:10:11:3b:70:80:1c:
81:0c:ff:4c:9c:d6:ca:05:07:f4:88:86:c1:bf:e5:
36:6a:37:b4:a3:e2:cd:e5:a1:47:75:c2:cd:a1:97:
bf:78:72:22:0e:36:c8:f3:72:4a:f4:c8:83:63:91:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:1E:88:63:08:F3:BC:A3:22:BD:4E:EC:EA:88:26:77:13:C5:CE:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/71098c23-a977-4f9a-97c9-cd4e759dea09/0/9B1E886308F3BCA322BD4EECEA88267713C5CEAC.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214809
Signature Algorithm: sha256WithRSAEncryption
74:c1:a8:84:fa:e0:8e:36:d6:11:e2:52:97:a7:12:7b:38:e3:
12:68:89:a6:41:58:ca:4b:a8:07:23:99:45:ba:31:84:28:d6:
92:28:88:e9:dd:85:a5:63:08:a3:a2:5d:34:36:45:47:69:3c:
32:02:b5:29:ae:37:7a:1e:4d:56:0e:08:d4:ae:7b:0e:e5:09:
29:ec:a2:b8:73:25:c5:a7:ee:6f:86:fb:b6:19:ee:d2:10:a5:
33:cc:35:b2:c3:9b:54:3e:40:0c:a6:59:13:7d:18:9b:cf:dc:
17:70:11:a1:dc:77:33:a1:35:bd:e0:b8:6e:09:07:98:b6:17:
b2:1c:dd:61:50:48:85:48:6b:3a:8f:4c:48:4b:be:a0:74:89:
2c:f3:27:67:6e:81:0e:6b:ef:61:53:16:db:66:d7:f4:73:4e:
20:6e:c2:86:c2:53:fb:89:0f:78:8c:af:b8:27:4f:bf:3c:d8:
34:2e:74:81:a7:00:c1:25:86:7c:e0:e5:f7:3d:d8:73:71:0f:
03:ac:14:a6:99:26:5b:8e:01:58:10:0a:36:29:dc:b7:44:76:
da:b7:60:b8:0b:ab:44:1d:a8:ba:47:3b:3d:94:95:c0:0c:ba:
a5:f0:61:d6:b4:19:8d:d1:db:74:59:22:06:6b:e8:da:61:e1:
28:31:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:46:50 2025 by rpki-client