Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xf9_LizUq2EooxIgpTBBqUmlbDk.cer
File: xf9_LizUq2EooxIgpTBBqUmlbDk.cer (raw, json)
Hash identifier: XcCrmLC+BFmMYs/MIawTBQnsAG5AZlRVaD84xVLTn+8=
Subject key identifier: C5:FF:7F:2E:2C:D4:AB:61:28:A3:12:20:A5:30:41:A9:49:A5:6C:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019910E2203774C95DBBB553AD5A90823574
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Sep 2025 18:41:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209640
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:10:e2:20:37:74:c9:5d:bb:b5:53:ad:5a:90:82:35:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 3 18:41:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5ff7f2e2cd4ab6128a31220a53041a949a56c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:26:ae:e5:26:1d:51:d6:e9:f3:92:0d:80:2f:
4b:ef:87:df:a4:86:2d:e7:1d:c6:b9:ff:96:e6:b0:
62:46:ce:a7:77:09:1a:66:e0:cb:92:41:92:ae:ae:
fc:5f:b0:53:0a:8a:14:1e:ba:a9:41:73:86:09:d2:
a0:80:cf:1b:4d:89:97:86:fb:67:0e:64:9b:fe:a0:
cd:a7:ef:ee:bf:ee:b9:d7:ce:e3:19:b6:18:44:37:
2e:62:b8:15:7b:7f:2a:0c:93:a5:7b:8a:b3:01:67:
49:46:63:09:ef:a4:5d:38:ed:7a:96:58:83:b6:30:
41:d4:f7:bb:af:9c:53:29:71:e8:d9:45:3b:3f:4d:
0d:74:d7:10:9a:a8:ee:83:42:9f:af:eb:8e:2b:a0:
12:88:fc:ed:33:74:cc:71:15:19:a5:da:a4:99:39:
bd:52:60:a3:84:b4:9a:42:7e:24:04:29:eb:c4:05:
fb:53:0a:62:5e:f2:f3:9a:90:43:d4:83:72:a7:d0:
2f:93:4c:24:1c:97:bf:cf:45:dd:3e:ef:ed:bc:bc:
44:ec:8f:ba:33:9e:2e:24:61:3c:51:11:65:32:bc:
4f:00:e7:fb:14:6e:92:a4:19:e5:c9:99:3c:21:84:
25:41:76:2b:db:94:44:15:fe:b3:fa:71:6e:a9:a9:
51:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FF:7F:2E:2C:D4:AB:61:28:A3:12:20:A5:30:41:A9:49:A5:6C:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/38a3e1-f818-46fa-8eeb-d1d391d6fcc5/1/xf9_LizUq2EooxIgpTBBqUmlbDk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209640
Signature Algorithm: sha256WithRSAEncryption
92:cf:b1:82:c1:5f:67:18:f2:91:0a:a7:c4:e6:b7:85:6c:6e:
3c:20:60:db:72:6b:8e:42:34:c0:69:ba:91:e8:d9:ad:8a:e7:
a8:ef:14:1a:6f:e4:d0:1f:55:41:b0:85:78:47:67:44:9b:0c:
99:16:a4:0d:9d:e7:40:ad:ea:99:a8:88:a0:d3:30:8b:cf:ae:
9a:05:82:13:ef:06:1f:dd:08:26:30:7c:66:5f:10:49:79:0b:
06:7b:fb:e7:e8:09:5b:9c:43:77:0a:90:2b:b1:e8:1c:fe:ac:
88:3e:7c:c3:59:c1:11:03:63:04:9d:ec:08:44:d1:3f:89:d0:
ee:9b:b8:2f:30:66:d6:31:93:91:83:df:5e:e5:9d:31:c9:2c:
04:eb:d6:4c:58:4c:66:5a:0a:21:20:c4:b5:05:28:c8:5c:a7:
6f:b1:dc:0f:f2:47:54:07:c6:14:0d:15:a0:71:74:36:64:41:
09:14:34:a8:67:d3:21:16:b8:dc:46:e3:d6:51:1e:63:ea:4c:
a8:cf:7b:18:d1:4f:f1:9c:86:04:23:fa:35:bd:ac:b3:0f:f0:
e1:21:97:86:06:e9:bd:82:db:ae:cc:17:66:86:a5:cf:2e:94:
13:a0:19:ad:70:ca:dd:27:36:96:e5:42:5e:b9:ca:f7:6c:4b:
f9:3f:58:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:31:07 2025 by rpki-client