Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ben594wsu8X6CLm4nwoR0rC6Rzw.cer
File: Ben594wsu8X6CLm4nwoR0rC6Rzw.cer (raw, json)
Hash identifier: 9lzas0aY7CT9tt4v13WHFilR3L6H+TWjY1L7Ya8iPeY=
Subject key identifier: 05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199388ABDE187F519444D81638AE77C87FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 11 Sep 2025 11:30:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15461
IP: 91.219.220.0/22
IP: 193.93.12.0/22
IP: 2001:67c:f84::/48
IP: 2a0b:afc0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:8a:bd:e1:87:f5:19:44:4d:81:63:8a:e7:7c:87:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 11 11:30:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05e9f9f78c2cbbc5fa08b9b89f0a11d2b0ba473c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:29:4e:55:31:ce:5e:c7:ee:fa:c7:a3:c2:72:
46:0a:e6:eb:bc:89:b8:47:c7:c9:1d:45:38:50:00:
ca:08:ea:d1:b2:43:d2:ca:3d:39:2f:27:75:9a:53:
4b:4e:8d:45:17:1a:b5:6c:a3:27:5d:b5:a7:43:a6:
63:2a:65:0f:b9:d6:65:5d:e6:0e:66:94:a4:ac:08:
24:ee:8f:f6:ea:ae:77:61:a9:28:5f:ef:b9:92:c6:
9e:90:90:dd:f7:6e:ae:ab:d6:60:be:01:bd:ae:5f:
d6:79:3d:9f:a9:6c:81:4d:b8:24:93:00:a0:e9:a9:
77:36:3a:28:95:24:1d:bf:69:0e:30:bc:d0:f1:0f:
ac:c6:19:39:aa:c1:66:54:f9:6f:3c:93:db:f7:6e:
61:d3:61:6c:d0:f2:1e:40:0b:12:4a:21:84:1f:71:
af:24:fb:60:e1:68:36:9b:72:1d:06:c4:b4:60:ed:
06:bf:8a:87:0f:ea:34:d6:de:57:4f:fb:fd:f3:2f:
ad:24:ef:81:27:37:66:05:a7:72:af:97:14:3b:ab:
49:6c:45:a0:08:eb:e7:44:2d:3a:93:34:fa:68:99:
75:08:83:20:ab:94:97:6f:fe:4f:44:59:76:eb:4d:
90:4a:c7:96:e9:2a:bf:59:92:1e:8f:28:82:88:99:
cd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E9:F9:F7:8C:2C:BB:C5:FA:08:B9:B8:9F:0A:11:D2:B0:BA:47:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/76538c-df5a-4a6a-9b86-a6ab97a0f445/1/Ben594wsu8X6CLm4nwoR0rC6Rzw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.220.0/22
193.93.12.0/22
IPv6:
2001:67c:f84::/48
2a0b:afc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15461
Signature Algorithm: sha256WithRSAEncryption
9b:df:f8:24:20:24:8d:bd:c7:71:14:83:f0:c8:2c:ec:5a:57:
5c:3a:13:b2:dd:48:ba:66:91:20:00:f4:a5:fa:88:f8:d4:a4:
38:05:da:0c:59:3e:35:85:81:05:70:4a:e2:51:1b:82:17:89:
8d:4f:a8:cc:b9:2d:b3:90:5d:b2:a3:31:0a:69:7c:d7:d3:97:
39:2a:41:ca:bd:71:1e:39:9b:9d:a8:af:bb:ea:9d:63:95:9e:
6f:ab:59:06:3e:fb:50:ef:ac:94:ff:85:21:bd:0a:ca:9e:3a:
60:b6:49:eb:a4:ff:b3:a1:a5:4c:dc:01:94:0c:60:6a:73:a5:
99:35:39:76:f3:a4:27:59:8b:13:90:b9:d4:e3:86:20:c6:8c:
35:7c:52:16:6f:3a:5a:28:c8:58:36:cc:75:9f:aa:8c:44:ac:
cf:fb:95:4f:7a:cc:30:14:ad:dd:41:6a:23:e1:80:bb:96:44:
a6:44:c1:c2:41:56:d6:c4:27:01:ee:b4:26:8d:36:71:d1:ef:
f7:9e:e0:51:fe:0a:d3:d8:6e:91:c8:ae:07:d2:af:52:47:4a:
81:a4:2c:15:c9:8f:61:02:ce:d0:a1:a3:a3:de:05:e4:8f:7c:
37:32:5a:a9:41:8f:9b:07:0d:88:38:f0:06:a7:55:0c:f4:98:
08:41:51:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:53 2025 by rpki-client