Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XHJiqVWtpig5MT247co1W_uYFCc.cer
File: XHJiqVWtpig5MT247co1W_uYFCc.cer (raw, json)
Hash identifier: SZAz0a5ZJntFQYExhY8tQC0XHXkEN+kB8HUVh+6zB5A=
Subject key identifier: 5C:72:62:A9:55:AD:A6:28:39:31:3D:B8:ED:CA:35:5B:FB:98:14:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0198ECCD8B97D582DADD269F7749DB698143
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/140d7b73-de43-4336-8509-30a22dd398f5/0/5C7262A955ADA62839313DB8EDCA355BFB981427.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/140d7b73-de43-4336-8509-30a22dd398f5/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 27 Aug 2025 18:32:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214819
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ec:cd:8b:97:d5:82:da:dd:26:9f:77:49:db:69:81:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 27 18:32:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c7262a955ada62839313db8edca355bfb981427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:53:d2:59:5e:a7:92:1f:bf:1d:4c:cf:2f:d8:
43:e7:85:02:82:57:81:70:0f:7f:06:a4:76:c3:aa:
73:f5:8c:23:02:a3:a4:ed:0a:f4:26:3a:bc:54:1c:
c3:f8:3c:17:28:0a:dd:f5:b7:4a:90:94:f1:7b:27:
a1:4b:6c:df:e1:56:5e:10:04:68:28:9d:5d:dc:67:
1d:37:0d:d8:13:51:1f:6d:f7:39:dc:3a:8e:cd:b6:
ca:86:23:6b:35:3e:7c:82:96:b4:9c:4a:33:59:00:
e6:e9:51:f4:f3:f4:88:1a:3a:45:84:a3:35:45:70:
67:38:7f:00:a0:f6:05:35:48:70:be:8a:73:dc:8e:
84:49:ce:ec:69:dd:53:ed:88:2c:27:fe:d1:8d:eb:
8b:ac:e1:c7:de:37:cb:2d:4a:86:09:a2:a3:e4:e0:
35:c0:74:c6:c1:e2:ea:45:55:0b:97:92:dd:ab:85:
89:31:13:bf:35:2f:70:c1:e9:21:64:44:89:5e:3f:
40:d0:1f:41:9b:5c:48:15:74:0c:ef:9f:17:fe:77:
32:7d:79:39:48:3a:fe:f4:a2:26:1a:ed:eb:99:dc:
b1:71:83:18:9a:36:40:26:dd:e0:89:e2:3a:5b:c8:
a4:44:e9:1e:9d:85:fb:7b:4c:e5:c7:21:14:bb:ee:
d4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:72:62:A9:55:AD:A6:28:39:31:3D:B8:ED:CA:35:5B:FB:98:14:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/140d7b73-de43-4336-8509-30a22dd398f5/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/140d7b73-de43-4336-8509-30a22dd398f5/0/5C7262A955ADA62839313DB8EDCA355BFB981427.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214819
Signature Algorithm: sha256WithRSAEncryption
7c:b9:5c:e6:54:b5:ea:55:08:dc:76:e0:b8:4d:27:e6:93:78:
d6:94:92:e9:4b:9a:6a:03:70:10:e7:e3:57:75:78:80:a7:87:
a4:97:da:5c:34:25:90:a4:8f:db:e0:74:6e:35:2f:a6:fb:2f:
67:b7:74:0a:79:52:ff:15:12:4b:10:3b:92:5c:c0:68:0b:3f:
e8:9c:89:2f:57:45:d0:4e:02:21:d3:c2:b8:37:42:20:27:62:
71:0e:cd:30:d5:fa:80:06:e0:df:30:d4:28:ed:e7:1c:86:11:
a9:97:44:11:7b:44:88:53:30:36:ab:25:38:34:a6:8f:df:39:
72:ed:a6:73:21:93:83:18:32:f2:14:9f:c1:99:22:6a:3c:bd:
1c:d3:23:74:04:19:6f:97:4a:67:bd:c7:6d:f2:52:6d:27:2a:
6e:60:99:14:4b:93:9d:84:f2:29:a0:aa:9e:7f:24:f7:a3:67:
ab:1b:4b:39:35:55:9d:59:c7:23:6b:e8:23:ec:ad:c6:37:5c:
6d:b7:d3:d5:29:b8:fe:b3:62:51:f1:47:13:1c:88:7b:51:1b:
cb:3c:ae:b9:c6:52:c0:e1:ef:20:8c:44:90:b3:fe:85:ae:5c:
4f:4e:6b:27:32:d2:a1:08:00:29:4b:38:43:46:56:ef:63:d9:
3c:97:aa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:16:08 2025 by rpki-client