Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9vqbUoZNztDV7ON-dDciSyVCJIs.cer
File: 9vqbUoZNztDV7ON-dDciSyVCJIs.cer (raw, json)
Hash identifier: XyjJyKhTmtCDHlecBw4spyKyhOw/yZ+HZBWYxzkt60w=
Subject key identifier: F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019986B7E452D5E49102974286D58B53611C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 26 Sep 2025 15:50:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206540
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:86:b7:e4:52:d5:e4:91:02:97:42:86:d5:8b:53:61:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 26 15:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6fa9b52864dced0d5ece37e7437224b2542248b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:78:8d:a1:18:d2:32:88:d7:a0:73:cc:18:3a:
34:61:70:67:a7:0d:6a:3d:18:6b:18:e7:8d:56:f2:
76:1c:21:8d:f5:e8:45:48:ce:54:ff:54:6b:ec:c3:
d8:9f:0f:38:b1:f9:7a:73:9b:5e:42:c0:47:4d:36:
e2:cf:97:ec:d1:64:7d:5d:c3:2a:a6:7e:ba:09:d3:
d3:a6:f2:6e:78:9f:1b:08:0e:9f:02:dc:e5:41:b6:
4d:e3:87:53:0d:67:85:86:be:cd:9f:c6:3e:11:9a:
cc:59:11:b4:49:0f:81:81:ca:6a:6b:7f:28:ea:98:
05:97:c3:6c:81:da:5d:dd:e5:22:a4:94:4e:f4:1d:
bb:8d:5c:e3:6b:a3:65:50:f3:31:21:2b:16:9e:67:
87:8a:1f:f5:f3:45:d6:07:61:14:26:05:a7:d6:2b:
7e:5b:02:8a:1e:0b:32:7a:b4:24:f5:88:b7:64:2b:
ae:77:b0:b7:17:e9:41:a2:38:a6:69:c1:ff:97:1f:
82:6d:2a:98:88:0c:65:69:d9:cf:5d:67:e1:c0:7e:
b1:0d:f7:fd:d6:c6:d0:f8:ed:ac:b4:0e:63:67:6b:
9c:22:cb:70:76:45:1c:89:13:0d:f3:14:cb:9e:0b:
6a:7f:65:c1:70:d5:4c:8b:41:c7:ac:90:ce:87:0d:
7b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FA:9B:52:86:4D:CE:D0:D5:EC:E3:7E:74:37:22:4B:25:42:24:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/48d987-4ca6-4320-92d0-099b6bbf1a45/1/9vqbUoZNztDV7ON-dDciSyVCJIs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206540
Signature Algorithm: sha256WithRSAEncryption
78:f6:5d:ee:d6:7e:20:10:2f:c2:5c:e2:96:61:a9:09:fe:65:
d9:48:0f:06:fb:9f:ac:f4:a5:11:b4:6d:3b:cc:44:7a:a4:62:
f7:bf:53:1c:b1:c5:c0:6a:9a:d4:4d:82:0b:e5:a0:42:8f:4d:
d6:e8:b5:49:c2:c9:6a:25:56:21:50:3c:32:d9:65:18:25:eb:
5f:4b:c7:f6:32:07:a9:5f:92:5c:85:00:50:52:7a:e7:82:f9:
5d:04:1c:14:d1:33:43:f5:d3:b1:0b:0e:f5:b2:3d:76:e8:7f:
a2:c2:d6:69:4f:a2:74:b3:df:ed:5c:d7:29:f9:73:a0:84:bf:
d3:5c:49:46:45:d5:1a:7e:76:5e:fe:2b:b4:c7:68:08:26:22:
eb:59:84:0e:c1:e8:3f:0c:4b:5f:12:24:79:20:46:cf:50:4e:
1a:a2:83:ee:4d:ef:eb:c1:09:be:de:73:56:6b:44:40:66:d8:
60:80:f1:ea:3a:cd:e5:43:ad:67:9a:b0:69:bd:a3:c7:23:a0:
15:f9:74:e4:ca:3c:3e:98:42:35:7c:f0:83:dd:d5:f3:f5:df:
5a:fa:2e:59:e1:81:27:b0:5b:b6:76:82:ce:4e:3e:99:27:ce:
f5:8f:ea:3b:ba:c9:7e:b1:bb:54:2e:84:87:2f:ee:28:89:6d:
7a:a6:39:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:51:32 2025 by rpki-client