Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6h7Prfr9T-FMvcIhuRWe6WGO_ok.cer
File: 6h7Prfr9T-FMvcIhuRWe6WGO_ok.cer (raw, json)
Hash identifier: BSgZG/qBo+X4QUoS354tVeL8lyiOIkk41JXQ1S3Fozs=
Subject key identifier: EA:1E:CF:AD:FA:FD:4F:E1:4C:BD:C2:21:B9:15:9E:E9:61:8E:FE:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019933B32D01276C8404CD3B3B7A2D227B94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Sep 2025 12:56:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a14:6840::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b3:2d:01:27:6c:84:04:cd:3b:3b:7a:2d:22:7b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 10 12:56:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea1ecfadfafd4fe14cbdc221b9159ee9618efe89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a6:c3:91:5f:dc:5b:10:23:6d:d7:75:f0:bf:
68:41:cf:1a:08:e7:55:b7:da:70:89:d4:3a:69:1a:
3e:cf:60:88:58:2a:4f:72:e7:13:3b:b8:db:cd:b2:
72:4a:fc:4a:aa:ea:7c:3a:31:21:a4:d5:f5:0a:1d:
cc:bf:3b:08:d0:17:0d:7a:e2:a7:f5:a3:da:30:b1:
8f:52:da:16:9d:01:6c:84:78:5b:83:52:c5:41:a0:
4e:a3:f6:fa:95:dc:bd:21:ad:0c:93:42:20:47:df:
2b:c0:46:69:60:66:1f:51:9c:eb:0d:11:14:67:03:
f4:7e:00:a2:40:ea:13:a2:10:59:7e:53:19:7c:fc:
ac:70:d9:25:94:d1:ba:87:f9:b5:13:2d:75:8f:cc:
a7:03:c6:f0:5f:42:33:47:7f:ae:1b:bc:0e:ec:ff:
a0:3d:f0:20:b3:33:86:14:75:be:6c:3b:c5:2e:69:
be:74:36:7c:4c:81:30:1e:95:53:a8:62:42:91:8e:
19:78:e0:a3:56:8b:67:5a:15:96:d2:a2:3c:ef:80:
5d:9c:5b:6b:79:3e:f0:7b:4d:f1:df:fd:3f:9c:da:
96:7a:e9:c4:3e:73:76:72:6b:a8:4e:dc:3c:eb:e4:
c9:69:00:fb:b5:89:1c:40:1f:68:d4:b8:18:4e:07:
0e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1E:CF:AD:FA:FD:4F:E1:4C:BD:C2:21:B9:15:9E:E9:61:8E:FE:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/021eaa-1cf0-41cb-b95b-162a82729f73/1/6h7Prfr9T-FMvcIhuRWe6WGO_ok.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6840::/29
Signature Algorithm: sha256WithRSAEncryption
1c:e0:b4:72:64:78:3b:8c:e7:4e:d8:6f:69:3b:3b:a7:86:ba:
3e:c2:ff:56:00:6d:ac:b1:91:d9:fe:90:35:e5:0e:d8:9b:13:
c6:11:54:78:1f:b4:a8:3f:c1:04:30:7a:10:cf:c3:dc:e8:d2:
70:3a:82:9b:3b:29:68:97:bb:59:81:dc:22:e9:56:ad:9a:14:
f3:a0:d1:68:15:3f:be:34:66:1b:28:ce:2d:51:ae:0e:86:4b:
5c:07:ce:62:c3:00:5d:38:94:20:d5:8a:5d:3e:d8:8e:24:c7:
7a:72:0e:3c:33:e6:f8:75:ba:cd:87:1b:16:cb:ab:7f:9c:89:
3b:1f:e0:15:15:13:c5:66:43:c0:81:a5:46:b7:06:60:4c:c6:
be:4d:40:d6:e5:5a:bc:a3:01:f7:88:ad:df:55:c4:6c:1c:35:
2d:20:de:2f:a2:96:d5:56:b0:ce:b8:f9:04:d5:86:75:23:3d:
c6:3c:9c:b7:e7:2b:7a:2a:a7:a4:37:95:e9:4b:22:20:25:36:
ce:b4:ad:6a:95:1d:6f:ee:38:7f:55:0c:7e:63:d0:ea:b7:0c:
1c:3b:82:b5:c7:b3:7a:5d:59:42:c0:ca:a5:89:3a:93:c9:f0:
92:dc:39:72:2e:91:54:c1:ff:b8:4f:21:19:e1:0d:1a:ba:72:
dc:e4:31:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:59 2025 by rpki-client