Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer
File: xD_GsUB3U5P8M2mvPQvOIMQ-XVs.cer (raw, json)
Hash identifier: EKxMLhyo8TtmjvgJoDebQI8Qwos85qy60X4FzOxWGMk=
Subject key identifier: C4:3F:C6:B1:40:77:53:93:FC:33:69:AF:3D:0B:CE:20:C4:3E:5D:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019FA5019CF8528159593CD29C75F2FE10AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 27 Jul 2026 19:16:14 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 153.56.143.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a5:01:9c:f8:52:81:59:59:3c:d2:9c:75:f2:fe:10:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 27 19:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c43fc6b140775393fc3369af3d0bce20c43e5d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a1:a9:18:e5:33:3e:ec:74:f6:72:df:e8:26:
21:97:32:22:63:d4:53:1b:d9:cc:6c:1d:c3:11:6e:
ef:2d:b1:79:28:2d:a9:88:e3:61:d1:8d:6b:78:3a:
10:d8:1c:13:7d:fe:31:71:8e:68:c3:00:26:45:38:
4f:a7:35:ee:92:e3:ed:8f:24:0d:e3:19:b1:d5:f7:
21:2f:ba:3d:39:c2:52:48:d5:59:c1:ff:b7:06:6e:
1a:78:70:d0:da:86:d0:04:1d:ce:55:1e:b6:66:2e:
b6:bb:4c:8a:0c:ac:9d:c9:6f:dc:4a:2c:12:c8:ab:
d2:2b:ce:db:74:6e:d3:45:aa:96:55:4b:0b:53:75:
f4:6b:0f:39:fc:46:75:6f:cd:6f:58:a2:2e:ec:c9:
b1:71:48:e1:d0:1c:af:75:64:0f:ed:a8:48:80:67:
72:10:fc:bc:17:05:43:69:ac:e3:d8:0e:3c:11:7c:
3d:9d:1d:54:08:81:8e:29:45:cc:37:f1:ef:30:8f:
91:1e:b0:f9:ba:6e:d1:4f:b0:e9:40:8c:90:61:de:
59:67:84:17:93:80:d5:14:49:d8:9c:0b:c8:19:3a:
7c:4a:d9:1e:52:9f:06:35:c0:3a:f7:4b:4a:d2:95:
a2:82:93:b6:95:ab:df:32:0c:03:a7:45:09:d2:44:
9f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3F:C6:B1:40:77:53:93:FC:33:69:AF:3D:0B:CE:20:C4:3E:5D:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/310e74-27c8-4053-9588-0c73f0160804/1/xD_GsUB3U5P8M2mvPQvOIMQ-XVs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.56.143.0/24
Signature Algorithm: sha256WithRSAEncryption
69:3f:a7:d2:b6:a1:bd:56:f7:ec:7c:05:61:be:89:08:7d:fb:
54:7e:1b:14:a8:96:4a:cf:9d:5c:df:20:1f:62:26:36:a4:78:
3f:df:b2:bb:ef:86:b6:c4:d8:91:2b:38:81:38:4b:bc:41:6d:
c9:78:02:1f:a4:43:b1:a4:49:a9:9a:dd:23:a0:c0:27:7b:81:
79:f1:2f:d8:1b:4b:2c:45:3a:39:1c:73:52:7a:6c:2e:12:46:
7a:ea:c3:4b:ac:6d:3e:3b:48:ac:fb:39:ff:c6:ad:8f:3a:48:
4e:93:16:d4:78:09:e9:fe:70:b0:d9:19:af:8c:33:dc:85:ae:
09:57:39:58:bb:c8:6f:2a:e9:89:f4:c7:2c:3b:b6:b0:32:fe:
bd:75:c8:f0:c7:4b:ce:a9:f5:b5:2d:a5:23:e1:d1:84:11:1f:
7e:8f:8c:89:c9:ae:3c:a8:03:33:f0:ed:d6:57:fa:77:5f:02:
22:91:4c:e5:48:fa:a5:5b:05:93:54:1a:14:0c:07:0f:6e:98:
e6:a1:5f:2b:3b:de:6b:26:45:91:7b:b5:a5:38:cb:2f:5f:52:
89:79:e0:ac:7e:ea:66:c8:a2:4a:04:f1:ea:a7:00:3e:e0:b0:
e2:6c:f9:0b:b1:39:21:fa:cc:42:a2:94:66:0d:d1:e6:d2:57:
1c:9d:5b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:50 2026 by rpki-client