Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1s78oMbNlHbTMBVgOHLSYb8rNTY.cer
File: 1s78oMbNlHbTMBVgOHLSYb8rNTY.cer (raw, json)
Hash identifier: 9RW/cD4im6lfBLCrcej0K0T9ie2gSEmmOIfs+1O1Ti8=
Subject key identifier: D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01997AE8BAD22205A39BF6ED6A173E7B9AB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 Sep 2025 08:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213383
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7a:e8:ba:d2:22:05:a3:9b:f6:ed:6a:17:3e:7b:9a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 24 08:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6cefca0c6cd9476d33015603872d261bf2b3536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e2:4f:13:32:e1:37:20:3d:6c:e2:de:e6:f5:
d5:5b:86:1b:59:97:bf:0d:cb:98:73:2a:5c:53:3a:
c4:a1:04:b6:8b:b5:34:85:db:75:ef:12:36:1c:27:
56:01:54:74:15:84:d6:6f:ca:72:78:1d:90:b6:8f:
4b:20:87:b4:ad:91:86:9e:97:ca:b0:f8:38:0a:7e:
33:88:41:8e:d2:78:53:b1:c8:30:d8:ef:cc:d3:9c:
f5:7a:e6:4b:76:69:14:e7:ba:28:fa:62:32:78:07:
64:c3:8e:ac:1e:aa:7a:26:21:de:4f:cc:10:bc:4e:
e7:23:df:41:a8:47:68:0a:34:7e:1a:4a:d1:62:d1:
a5:dd:6b:cb:42:2f:37:43:5a:90:73:65:7d:76:67:
da:05:34:50:28:84:2c:16:f6:81:4f:68:e3:b9:0d:
75:f5:5f:5a:79:e8:62:75:9e:18:d2:9f:97:5a:59:
ff:68:1e:16:32:8b:2e:09:6f:5f:66:2e:66:75:57:
61:bc:c2:46:de:2b:ef:14:bb:38:47:b7:6e:a3:fa:
b2:fc:c2:6d:1b:c5:31:e7:40:34:b8:35:b5:d8:dc:
2a:0f:51:66:dd:f5:16:ca:2a:96:e7:b9:ca:71:43:
b1:6b:6b:8a:c6:f5:df:6a:55:83:ef:12:bd:47:99:
a0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CE:FC:A0:C6:CD:94:76:D3:30:15:60:38:72:D2:61:BF:2B:35:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1942bb-b314-4e11-98b2-6608b61a9aaa/1/1s78oMbNlHbTMBVgOHLSYb8rNTY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213383
Signature Algorithm: sha256WithRSAEncryption
a7:c2:1e:43:e0:2a:fc:d2:a5:2e:f1:f3:8d:52:f3:3b:d1:7d:
a1:1c:bc:81:11:ee:c9:64:16:3d:9d:ec:5c:4b:46:39:99:d1:
35:af:25:31:88:00:ee:a7:68:b5:82:29:8b:86:5b:18:a7:50:
57:55:f9:63:ee:9c:ac:c1:af:1f:77:5e:f1:5e:f6:17:91:b8:
ed:38:69:ab:2b:50:d7:22:ef:ea:33:76:1d:77:2d:b6:62:4d:
51:80:de:68:ee:47:8e:e3:67:3a:a9:38:68:41:25:1d:0d:32:
c8:45:4d:8e:d2:94:2a:95:36:30:33:f8:2e:77:53:3e:1c:71:
bf:16:4f:0f:05:51:5c:f3:7c:e0:22:99:ca:e0:2d:e6:aa:84:
3b:e2:43:0e:13:70:ec:91:2b:05:b1:68:c2:ca:36:2d:6e:ec:
6a:18:d3:0c:ae:1f:86:fe:d2:57:66:73:0c:04:80:6d:e2:22:
72:1f:7a:63:fc:3f:ef:68:89:38:35:a8:be:f0:e3:13:f9:22:
f5:61:b1:2e:eb:e1:ce:bf:87:eb:2f:03:8a:81:a5:53:ba:d5:
6c:af:d5:2c:9b:72:4b:f7:4e:8c:f2:fd:f7:e0:28:6d:4e:2b:
0b:04:d8:71:16:07:be:b6:e9:21:61:a9:08:32:40:5c:a0:36:
28:d7:51:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:29:02 2025 by rpki-client