Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xGW8dSWUyRpA2KdKd7FFApzWMkc.cer
File: xGW8dSWUyRpA2KdKd7FFApzWMkc.cer (raw, json)
Hash identifier: 0QdFqCpQDdRgGG0A6cdQj1eljc0GnKtcSDhKoAAJJsE=
Subject key identifier: C4:65:BC:75:25:94:C9:1A:40:D8:A7:4A:77:B1:45:02:9C:D6:32:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F090B0CC3615DAC2ECE1588A988B0F7B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/907f3e-75a0-48fc-972d-f8dcc805a84c/1/xGW8dSWUyRpA2KdKd7FFApzWMkc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/907f3e-75a0-48fc-972d-f8dcc805a84c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 27 Jun 2026 12:25:46 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 50224
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:0b:0c:c3:61:5d:ac:2e:ce:15:88:a9:88:b0:f7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 27 12:25:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c465bc752594c91a40d8a74a77b145029cd63247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f4:5f:16:8e:98:f8:1d:c8:a4:56:c7:20:88:
58:fb:05:2b:5b:3a:46:7a:d1:48:75:f7:e0:ef:07:
f9:d3:04:6e:0c:04:38:e7:c6:20:e0:72:ed:fa:ff:
be:be:dd:f0:64:6e:18:75:c8:c4:70:6c:b5:a5:5d:
16:34:32:db:bb:0d:71:a8:10:26:bc:ee:44:2d:24:
20:d1:9f:9b:2c:7d:02:63:8d:44:80:84:f5:18:be:
a0:c0:a9:69:a4:bf:cd:89:7d:36:c2:ef:6c:1b:04:
94:5e:91:ec:88:c1:fe:76:24:16:1d:53:51:de:1d:
1d:2e:8e:16:2f:49:3d:7d:fa:89:45:59:c3:01:c2:
45:2d:a6:47:12:86:77:d9:3e:70:e6:63:72:a7:ee:
c1:e1:59:9c:c8:20:51:33:d3:f4:30:69:70:1d:df:
94:61:35:30:c9:54:79:c4:81:7d:a1:87:c3:ef:6e:
57:cd:16:2f:5d:02:cf:6c:95:27:24:01:52:4e:d4:
ae:97:af:b7:49:0c:ac:5d:e8:03:df:b2:d2:57:f0:
d8:19:17:f3:5c:c5:66:55:ca:7b:68:0e:18:96:3a:
20:45:17:fe:c6:e3:84:7b:08:5c:e8:99:30:8b:01:
b4:33:0a:c8:59:47:f9:d6:d5:cf:0c:8b:72:eb:0b:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:65:BC:75:25:94:C9:1A:40:D8:A7:4A:77:B1:45:02:9C:D6:32:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/907f3e-75a0-48fc-972d-f8dcc805a84c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/907f3e-75a0-48fc-972d-f8dcc805a84c/1/xGW8dSWUyRpA2KdKd7FFApzWMkc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50224
Signature Algorithm: sha256WithRSAEncryption
97:c4:13:47:bd:b1:ca:7a:20:a0:06:c1:b8:e1:ab:05:11:c2:
f7:6f:ec:0c:55:d4:6c:c5:49:7e:54:8b:cf:18:90:b4:7c:09:
3b:c0:1c:84:c3:92:5a:52:eb:95:5b:93:3f:c0:a1:44:9c:b3:
fb:8b:d0:cf:f0:3c:4f:9f:5f:92:b8:85:42:b2:a4:ab:d6:49:
02:67:4e:27:aa:0d:73:b2:8a:38:55:6d:0a:e9:29:cf:34:44:
a9:a3:91:cf:80:31:52:af:b5:16:1f:3f:7c:c7:7e:d8:00:bd:
75:b5:71:81:8a:61:92:64:51:04:0e:72:8e:c7:ab:9c:04:ed:
6b:5d:1e:87:e3:0f:a2:a2:3e:e7:94:bd:98:0f:88:cf:73:ae:
ab:a0:15:89:6b:3f:7a:ae:d7:77:e7:17:db:11:82:0e:b0:a1:
16:2d:25:cc:5e:ec:f0:38:7c:fc:19:d6:fb:e5:97:f8:e4:72:
f6:0e:7d:4f:00:1f:4d:10:43:b4:17:28:b2:58:c7:6f:aa:19:
13:ad:b8:5a:28:7a:da:5a:4e:17:95:77:5c:01:18:ca:cf:05:
70:37:6a:df:c7:21:8f:05:fc:cd:1c:3e:1a:fb:89:9f:cc:39:
28:08:80:50:34:40:6a:98:d5:38:d8:8c:69:bb:92:32:c4:d3:
0b:b8:4f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:30:09 2026 by rpki-client