Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jXcsVOPZCA6it45wNP2EG2dXzUQ.cer
File: jXcsVOPZCA6it45wNP2EG2dXzUQ.cer (raw, json)
Hash identifier: o/r80xiRo41gKOPLLmMY+j+DLY6oVgAtKXLD36goxXY=
Subject key identifier: 8D:77:2C:54:E3:D9:08:0E:A2:B7:8E:70:34:FD:84:1B:67:57:CD:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A6D1ADF7D453BEC116A2DC62AFBCB88AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.gxt.network/repo/gxt-as44822/0/8D772C54E3D9080EA2B78E7034FD841B6757CD44.mft
caRepository: rsync://rpki.gxt.network/repo/gxt-as44822/0/
Notify URL: https://rpki.gxt.network/rrdp/notification.xml
Certificate not before: Mon 10 Nov 2025 09:31:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44822
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:6d:1a:df:7d:45:3b:ec:11:6a:2d:c6:2a:fb:cb:88:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 10 09:31:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d772c54e3d9080ea2b78e7034fd841b6757cd44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:35:60:83:a5:e5:3a:6b:9d:5b:95:f1:f8:
24:3e:f4:ea:96:67:51:68:ab:d9:fa:fd:b5:41:05:
de:93:0d:fc:b1:86:f2:de:2a:dd:a0:ef:d9:fa:4f:
cd:b7:55:3f:ae:f8:1d:1f:8a:04:d8:3e:51:5e:6f:
60:ed:53:0a:67:ef:6a:23:93:98:db:02:82:6a:03:
12:10:a3:4e:fd:c2:4c:48:7d:e5:f5:a0:21:b3:dd:
4f:65:7e:75:97:aa:33:f4:91:e9:45:9b:0d:16:9a:
98:f4:1f:38:dc:c6:a3:44:09:bb:12:f6:a6:60:a9:
e6:cb:90:86:d7:5f:e4:a8:d2:10:66:73:b0:49:e7:
35:eb:4f:8d:f5:1c:ff:18:b2:cb:a6:78:7c:18:57:
4c:ae:55:b4:66:28:cd:3a:35:b9:87:52:90:6a:03:
e3:9e:36:3a:a3:c8:e2:3b:e0:d4:4f:4e:ab:fb:4c:
72:c9:3e:56:b5:5c:68:f2:45:26:90:77:6a:22:4e:
67:a0:75:5b:de:c6:65:43:dc:34:db:73:c3:fe:31:
9c:cc:b1:2e:b9:cc:c8:5d:3d:6f:94:92:ff:bb:05:
ee:ba:b1:6a:5c:cb:d7:8e:02:93:ec:19:78:d1:36:
bd:85:4c:1d:1e:42:6b:b5:27:b9:cf:c1:8f:89:24:
6a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:77:2C:54:E3:D9:08:0E:A2:B7:8E:70:34:FD:84:1B:67:57:CD:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.gxt.network/repo/gxt-as44822/0/
RPKI Manifest - URI:rsync://rpki.gxt.network/repo/gxt-as44822/0/8D772C54E3D9080EA2B78E7034FD841B6757CD44.mft
RPKI Notify - URI:https://rpki.gxt.network/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44822
Signature Algorithm: sha256WithRSAEncryption
5f:28:dd:ce:7d:d1:bf:7e:ac:c3:64:8d:14:3f:f8:f7:9b:9b:
71:04:8f:c0:63:c8:7a:e5:51:1c:ce:6c:3a:45:d5:10:58:99:
db:c2:36:fd:6c:92:11:f1:e3:ec:99:fe:64:29:6b:e4:d9:98:
ed:50:90:2a:7c:73:41:f6:31:46:4f:04:13:e1:63:8f:1f:77:
fd:66:92:93:dd:8b:66:05:a2:8f:29:f2:1d:c2:cb:00:52:71:
e3:58:73:21:3a:51:70:3d:4d:af:1f:fd:d1:4d:df:1d:e6:da:
1a:b5:2a:bc:05:28:01:65:df:b6:02:c6:ae:7b:d2:10:ce:ac:
74:84:c0:96:68:da:79:ea:7f:26:1c:b3:fc:6d:78:ee:0a:ba:
28:60:05:33:fa:4c:df:af:76:ef:dc:1a:f0:ca:34:76:63:63:
03:17:c5:08:9f:12:70:b7:30:82:e2:85:e3:7f:a6:44:b5:f4:
53:6d:36:5b:b8:63:17:c8:09:f7:21:dd:1a:de:38:cc:2d:3d:
eb:20:1c:11:18:e9:07:79:55:8e:fc:65:77:87:1f:e1:42:a9:
7c:38:9f:32:35:25:12:4d:f0:4c:26:6b:bf:bb:9f:ce:77:a0:
19:51:61:09:ff:9b:ba:e6:d7:1b:fa:05:f8:e1:71:2e:dc:c5:
5e:e6:ce:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 11 10:04:03 2025 by rpki-client