Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GxubyMfg_Ee_iwpXLRpXLWppa7c.cer
File: GxubyMfg_Ee_iwpXLRpXLWppa7c.cer (raw, json)
Hash identifier: TQO/+WUxnobohWI4gvUF37H87fZVXL8ltoFJfG51YSU=
Subject key identifier: 1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B77C73F9C09E83B5B098456D26B5CE4DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 01 Jan 2026 04:18:25 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 207655
IP: 194.36.0.0/24
IP: 2a12:3840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:c7:3f:9c:09:e8:3b:5b:09:84:56:d2:6b:5c:e4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 04:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b1b9bc8c7e0fc47bf8b0a572d1a572d6a696bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:24:1a:80:ad:1a:6f:9c:49:62:f5:7b:b6:
a5:8c:2f:71:be:2d:c5:42:8f:38:ba:76:a6:bd:d1:
b3:67:e6:12:cd:d7:b2:2e:2f:99:ce:4b:42:27:84:
22:d3:f8:c1:4b:32:54:cf:4e:06:4b:39:56:d1:11:
dd:af:8d:fe:0e:ca:ca:79:bf:b2:16:8e:47:38:fa:
f3:15:d4:bc:16:c4:16:4f:dd:60:50:2c:b5:67:ca:
8c:df:7a:b8:cc:d4:0a:69:e9:80:7b:47:a4:cc:63:
21:68:68:69:6f:66:2a:ea:c3:39:50:2c:7e:fd:4c:
65:5d:a5:d5:9c:e8:96:48:e8:4e:ad:22:de:14:db:
78:36:56:7c:15:87:62:ae:68:f2:7f:ee:f4:08:88:
fb:e3:11:90:67:6c:7a:3f:87:3a:41:d6:16:1d:4d:
e0:3e:c5:a8:0c:81:80:c7:10:8f:c0:18:15:bb:ae:
ef:c2:89:57:3a:ce:a1:c9:0d:d0:0c:00:0e:e7:35:
f8:50:19:1d:49:de:79:6a:91:83:6c:19:ff:f9:bd:
c0:90:bb:54:30:b0:21:8f:0f:d6:ec:b4:94:44:6a:
c8:77:59:e9:28:b5:e4:6f:aa:93:fe:05:c2:86:7e:
2c:0f:02:04:93:c8:15:1e:d1:e8:05:b5:15:ee:5e:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1B:9B:C8:C7:E0:FC:47:BF:8B:0A:57:2D:1A:57:2D:6A:69:6B:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4d2a9f-6f78-4cc6-9ad6-0f6b8468c79d/1/GxubyMfg_Ee_iwpXLRpXLWppa7c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.0.0/24
IPv6:
2a12:3840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207655
Signature Algorithm: sha256WithRSAEncryption
55:aa:9c:25:55:a9:aa:db:b8:4f:34:34:32:ea:76:d8:d4:1a:
71:05:f6:78:5a:16:56:63:1f:0d:03:5e:0f:e5:dc:81:af:08:
51:30:4b:96:71:ed:2d:73:c7:09:59:83:9a:80:26:ef:f4:43:
8d:68:c4:fd:b1:81:9c:58:c7:36:2c:57:26:e7:80:91:7d:22:
ba:4e:0c:6e:d7:72:07:ce:45:a1:e1:6a:eb:4b:1a:da:b5:6f:
f0:8a:58:ff:59:56:51:87:5f:cf:3e:da:93:8a:ae:31:24:29:
77:c2:a9:12:c1:5e:0a:9b:27:7c:55:02:9b:d8:3d:b2:bf:89:
7e:32:26:89:c2:1c:f3:6a:48:65:71:97:66:38:72:70:b9:95:
a7:fd:18:5f:3b:9f:b5:ca:54:43:b8:c7:2c:ef:9b:e0:e1:f7:
31:82:c9:07:0d:2b:3b:a7:e2:52:60:c9:8b:86:2c:05:1c:51:
99:ae:c3:c7:b7:fc:e8:a7:2b:7e:27:b7:13:71:15:b3:d2:29:
a9:32:32:7a:23:dc:5d:08:6f:d4:6f:25:76:50:c6:e8:f5:18:
3d:c0:af:b2:04:eb:9e:79:6d:17:ae:29:2a:67:5f:3f:7e:91:
d4:04:3e:0c:f9:1f:94:1d:37:ac:b4:d7:3c:34:58:fd:17:7a:
0f:57:f8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:20:44 2026 by rpki-client