Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z3MgFidzz_4oZtlxKnOOQZlTYRc.cer
File: z3MgFidzz_4oZtlxKnOOQZlTYRc.cer (raw, json)
Hash identifier: L8Ac3+gxK8fyZMDW5yOvccUtjKpkA19KbZjxtLBFlqI=
Subject key identifier: CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01990B8E79DCE5011E2C4C296CA01451EC09
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Tue 02 Sep 2025 17:51:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208824
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0b:8e:79:dc:e5:01:1e:2c:4c:29:6c:a0:14:51:ec:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 2 17:51:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf7320162773cffe2866d9712a738e4199536117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ca:71:65:f0:44:d5:dd:31:bd:11:b6:0c:a9:
f4:98:02:8c:95:16:43:52:54:7d:4d:87:75:96:80:
da:7b:e9:71:7c:9f:27:fa:17:6d:48:95:4f:69:75:
c8:90:52:3d:9d:68:de:7b:97:35:bc:14:6e:a4:ea:
2b:29:ed:da:25:c8:96:87:71:5e:db:01:05:97:06:
08:76:36:e3:e6:67:fb:f0:d0:16:8c:24:18:6b:7b:
fc:e2:ad:c1:20:69:b6:84:2c:cd:63:c2:17:7c:b6:
fe:4a:90:b8:cc:0d:5b:df:ac:8b:c7:e0:c9:fc:37:
e4:5f:78:00:0a:9c:01:10:a0:3a:e8:73:49:e3:06:
30:e5:33:75:a2:c4:58:09:af:79:21:a0:98:84:48:
f1:ea:a5:39:22:c8:2c:db:d9:61:fb:7d:83:85:db:
0e:f1:b0:30:1f:95:8f:0e:59:d8:3b:9a:23:9f:67:
4d:e5:30:a4:1e:ed:b4:41:0a:af:74:d4:66:e2:a4:
09:c4:51:76:c3:96:bc:8c:70:ac:40:e1:23:c4:b9:
d8:96:a5:ab:b5:9a:63:07:b8:34:0f:bc:06:bb:69:
8b:bb:91:3e:93:b5:ce:47:d7:81:02:0e:2d:8e:fd:
3b:3a:3a:83:cd:d6:9d:4d:61:2e:72:44:44:fc:d9:
11:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:73:20:16:27:73:CF:FE:28:66:D9:71:2A:73:8E:41:99:53:61:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/4305cb3b-8d4f-4973-92b2-962a0d7e0db7/0/CF7320162773CFFE2866D9712A738E4199536117.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208824
Signature Algorithm: sha256WithRSAEncryption
7d:c0:19:1c:78:80:b9:96:f4:12:fd:54:7a:d0:08:0f:51:00:
9b:e7:7e:ae:68:ea:7e:f9:05:f3:1d:4a:45:d7:64:ea:df:79:
d0:c9:d0:d1:cf:28:fa:b8:89:a3:bd:07:3e:86:6f:b5:53:23:
4d:af:41:f3:96:3e:58:5b:bb:0c:50:bf:b4:08:19:46:75:a8:
03:f5:93:f8:87:75:1f:9a:91:33:af:95:aa:46:b5:27:eb:7d:
a6:4f:77:aa:f0:0f:74:ae:01:5c:34:34:8d:85:42:34:78:88:
a3:64:f9:40:5b:1c:f2:07:01:78:98:74:e1:67:bc:50:cb:e5:
b9:fc:01:67:bd:0b:1b:47:21:9a:35:8c:ec:42:3a:31:b8:d7:
ac:f8:95:27:b3:92:70:61:f0:a9:ad:ae:c8:64:1d:21:22:33:
a2:a4:03:47:9d:9b:31:ae:cd:d3:e5:9e:0a:96:32:c1:69:81:
7a:65:52:0a:58:e4:17:18:4f:45:7e:d9:42:1e:2b:ba:0d:d3:
36:7e:e9:aa:7a:0b:54:79:73:b3:32:60:7c:74:48:06:e8:83:
00:67:a9:7d:b9:44:d3:43:d0:bc:3a:5e:bf:bd:5f:4b:7e:da:
39:05:72:a3:82:3a:a3:59:d3:fb:83:6d:d5:20:aa:3c:69:ba:
ff:fb:d8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:24:45 2025 by rpki-client