Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer
File: 9gkyx7iUUZ00YkcwLrNl9cQJsDw.cer (raw, json)
Hash identifier: 7t7ifLxRfq2IZQrhDV93lJvPXea6v5U4hz+P0WlrdO4=
Subject key identifier: F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199C452906200C306B83A401C5152458C7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 08 Oct 2025 14:56:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 6825
IP: 194.88.27.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:52:90:62:00:c3:06:b8:3a:40:1c:51:52:45:8c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 8 14:56:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f60932c7b894519d346247302eb365f5c409b03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:ae:66:cb:03:67:52:5d:dc:44:b5:f0:fb:
36:77:2a:8e:9b:87:bd:85:ae:0a:fa:28:92:89:0c:
66:a8:23:59:f7:c5:92:fa:52:e6:58:43:6f:3e:d1:
e3:8f:6f:bc:83:8a:79:89:c9:ea:d7:97:a9:34:38:
af:f2:18:a1:78:12:46:12:ab:07:ab:2e:2e:08:ae:
8c:5c:41:0c:cb:77:27:09:32:f7:1c:ed:6b:d4:71:
d1:05:8e:f5:a7:53:3d:b5:95:3b:a9:1d:fe:ed:db:
6c:fd:f8:76:26:65:ae:d1:e4:be:8d:f2:c0:8b:26:
02:0e:7e:b8:f0:f4:ad:ca:68:63:ed:a1:73:ad:e1:
4e:72:17:ae:db:60:54:a2:f6:55:8a:6c:83:46:03:
bd:46:f4:a3:27:95:3e:49:75:c5:5f:21:0b:d9:8d:
a9:fd:de:d4:55:81:93:f5:fe:76:62:ab:34:4d:4a:
f2:97:c3:34:eb:8b:83:04:b4:e6:ad:c3:28:d0:c3:
a5:6c:a1:05:96:72:8e:47:d3:de:bc:f4:65:fb:67:
4f:8e:eb:ee:84:4e:e5:f6:ae:2f:af:07:12:fa:ea:
05:af:e3:5c:4d:26:a9:62:f6:74:ac:0b:da:de:07:
90:61:3b:90:45:cc:d6:1d:22:86:66:fd:84:45:9a:
d6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:09:32:C7:B8:94:51:9D:34:62:47:30:2E:B3:65:F5:C4:09:B0:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/570ccd-d2ad-4ca3-afef-bd57e0eb29f0/1/9gkyx7iUUZ00YkcwLrNl9cQJsDw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.27.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6825
Signature Algorithm: sha256WithRSAEncryption
7b:60:f5:af:a4:a1:c8:63:dc:af:2e:e3:02:42:c6:b8:0e:e0:
49:6a:5b:ee:fc:56:52:95:f7:ef:04:18:45:e4:ec:b5:be:6b:
98:eb:12:61:74:b8:b0:cc:0f:02:69:49:97:58:e7:57:02:be:
dd:dd:45:29:e6:83:4f:1a:a4:ae:ba:18:94:07:9a:68:ee:e7:
cd:cc:dd:c8:ee:a7:2a:4f:af:30:ef:bc:48:98:2e:68:a6:e5:
ea:5d:30:9c:0a:7f:7d:57:a8:c2:1d:0b:6f:e3:a3:da:32:7c:
3f:de:70:c4:16:b0:91:4a:7c:d8:4e:55:a8:46:d9:a9:89:52:
34:68:be:83:a1:fc:ac:56:60:ad:b2:55:b1:92:84:71:07:53:
36:df:0f:59:f5:2d:df:27:98:63:06:ab:9d:1c:61:4a:6a:3f:
77:09:89:7c:7a:b3:73:32:88:32:0a:ad:a8:ba:dc:23:38:85:
4d:7e:30:5c:81:1e:ec:85:21:dc:71:00:1b:68:fa:c3:65:77:
d7:e1:20:1f:9c:0e:9a:76:30:22:c9:d7:62:df:db:c8:e2:79:
ed:4b:4c:be:c4:28:11:18:c5:f2:a4:b3:cf:74:29:e6:a5:7c:
32:54:37:96:19:cf:bf:18:eb:6e:e7:88:d0:d9:9d:c9:ba:f5:
fe:e0:ba:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:54 2025 by rpki-client