Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6h7Prfr9T-FMvcIhuRWe6WGO_ok.cer
File: 6h7Prfr9T-FMvcIhuRWe6WGO_ok.cer (raw, json)
Hash identifier: nRmlPhK095uwU1K+NcMn0c3j0xj6h2zSnvymyHWSbNA=
Subject key identifier: EA:1E:CF:AD:FA:FD:4F:E1:4C:BD:C2:21:B9:15:9E:E9:61:8E:FE:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019B7EA7046719F7A8CF288B9BA233EB97F4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 02 Jan 2026 12:20:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 2a14:6840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a7:04:67:19:f7:a8:cf:28:8b:9b:a2:33:eb:97:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 12:20:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ea1ecfadfafd4fe14cbdc221b9159ee9618efe89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a6:c3:91:5f:dc:5b:10:23:6d:d7:75:f0:bf:
68:41:cf:1a:08:e7:55:b7:da:70:89:d4:3a:69:1a:
3e:cf:60:88:58:2a:4f:72:e7:13:3b:b8:db:cd:b2:
72:4a:fc:4a:aa:ea:7c:3a:31:21:a4:d5:f5:0a:1d:
cc:bf:3b:08:d0:17:0d:7a:e2:a7:f5:a3:da:30:b1:
8f:52:da:16:9d:01:6c:84:78:5b:83:52:c5:41:a0:
4e:a3:f6:fa:95:dc:bd:21:ad:0c:93:42:20:47:df:
2b:c0:46:69:60:66:1f:51:9c:eb:0d:11:14:67:03:
f4:7e:00:a2:40:ea:13:a2:10:59:7e:53:19:7c:fc:
ac:70:d9:25:94:d1:ba:87:f9:b5:13:2d:75:8f:cc:
a7:03:c6:f0:5f:42:33:47:7f:ae:1b:bc:0e:ec:ff:
a0:3d:f0:20:b3:33:86:14:75:be:6c:3b:c5:2e:69:
be:74:36:7c:4c:81:30:1e:95:53:a8:62:42:91:8e:
19:78:e0:a3:56:8b:67:5a:15:96:d2:a2:3c:ef:80:
5d:9c:5b:6b:79:3e:f0:7b:4d:f1:df:fd:3f:9c:da:
96:7a:e9:c4:3e:73:76:72:6b:a8:4e:dc:3c:eb:e4:
c9:69:00:fb:b5:89:1c:40:1f:68:d4:b8:18:4e:07:
0e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1E:CF:AD:FA:FD:4F:E1:4C:BD:C2:21:B9:15:9E:E9:61:8E:FE:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6840::/29
Signature Algorithm: sha256WithRSAEncryption
46:35:d7:1d:19:ee:1c:73:93:e8:88:1c:b3:b1:a2:d7:78:13:
e8:98:a8:41:e1:88:c7:71:e8:3f:af:8b:12:b4:6e:38:e4:35:
18:a0:1d:cb:f8:6c:6e:77:5d:ae:57:64:fa:10:01:13:5d:4f:
e8:0c:fb:be:5c:e9:27:16:f4:05:f5:73:10:71:c7:b0:07:e1:
74:4a:0d:c8:91:b3:75:7a:c0:45:ce:dc:fb:a4:52:c8:95:d2:
d5:78:ae:24:e9:ce:f7:65:f2:c0:9d:db:a8:f6:2a:a6:6d:87:
26:b0:af:5c:c8:d3:11:82:b3:db:30:46:e0:3b:a5:d2:a7:48:
c1:92:aa:9a:a7:8c:5b:fb:f3:7a:45:c8:90:90:11:31:b9:84:
e3:63:8f:16:76:cc:7c:92:de:6f:b2:87:ec:ed:a9:18:09:4f:
8a:27:e0:9a:bd:35:6e:42:40:58:3e:66:a8:65:3f:c4:1e:02:
4b:fb:15:4e:98:a6:eb:1b:80:d7:ea:47:74:46:68:ff:26:33:
01:b9:ef:e7:c1:94:3c:67:58:56:53:70:62:c1:56:42:06:fd:
bb:3e:86:3a:08:46:3d:b0:08:aa:fe:64:47:5e:ad:82:f0:43:
84:a5:8e:c3:ab:0d:14:cd:7d:38:b7:03:f1:41:08:ae:df:90:
72:48:53:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:29:06 2026 by rpki-client