Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/frHgvC-KBA2BVYCM9LKcVM2tlEI.cer
File: frHgvC-KBA2BVYCM9LKcVM2tlEI.cer (raw, json)
Hash identifier: yh+xVyIA1Gv8fqxlsesKtXlC1Til4LbfjgDsU9H18Gw=
Subject key identifier: 7E:B1:E0:BC:2F:8A:04:0D:81:55:80:8C:F4:B2:9C:54:CD:AD:94:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01997AEC96A6DEDD1523E7876D221B3B1A2D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 24 Sep 2025 08:52:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215702
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7a:ec:96:a6:de:dd:15:23:e7:87:6d:22:1b:3b:1a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 24 08:52:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7eb1e0bc2f8a040d8155808cf4b29c54cdad9442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:9f:7b:49:47:7f:01:fe:d8:4a:67:fb:14:
67:ea:c6:7d:29:49:de:c5:17:75:85:4d:70:59:cd:
8c:23:62:b3:8c:07:a0:3a:d0:cd:ca:92:22:59:01:
fd:0a:4b:79:d2:e0:f9:29:ca:43:29:a9:94:a5:b4:
11:22:b3:bc:ed:2c:a2:77:0a:c6:41:94:5d:2b:fb:
41:bf:61:6e:cd:e0:21:01:7f:28:9e:bd:68:f1:cc:
09:25:1b:cd:dd:3c:4b:c3:58:71:52:21:38:91:2b:
75:d6:7b:b5:54:dd:2b:e0:18:92:20:ab:c7:ac:6f:
c8:35:82:0f:18:55:d9:95:f8:b9:a5:6e:83:20:08:
6f:ea:67:03:37:46:49:a4:6e:fc:83:23:d7:df:40:
2f:cf:b0:7d:13:16:18:2d:7b:a4:f2:48:57:08:52:
61:11:c9:30:fb:cd:ff:65:a4:26:bd:65:84:f2:51:
be:3d:f0:e1:8a:06:3d:f6:1e:1c:33:d0:c8:99:3b:
3f:13:d9:0c:06:49:66:f9:b3:16:93:94:88:28:de:
cd:fe:ff:08:d1:43:4a:75:08:74:72:84:11:75:3e:
bd:49:fc:07:a4:3d:ac:d2:e1:06:79:8d:78:1a:1d:
eb:0f:cd:a2:99:da:cc:66:5d:fe:f3:32:b3:33:7c:
4c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B1:E0:BC:2F:8A:04:0D:81:55:80:8C:F4:B2:9C:54:CD:AD:94:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215702
Signature Algorithm: sha256WithRSAEncryption
5d:28:9f:3b:05:16:bc:7e:30:fb:dd:e7:e6:f8:ae:32:31:d5:
c9:46:b8:af:ff:4d:9c:ac:b4:83:68:f8:0c:cb:df:d7:23:43:
ad:6e:ba:3e:7e:05:7b:11:22:37:6c:09:1c:4b:2e:79:53:f0:
36:2f:d6:e2:a9:4a:e6:e0:b4:32:5d:cd:0e:0c:f9:b1:59:bd:
b1:ac:41:9b:c7:d6:fd:8f:51:40:10:ba:1a:82:61:19:59:b9:
39:1a:11:51:39:8c:26:a6:31:c5:69:4a:23:b9:ae:3d:d7:cd:
75:74:5d:40:e6:04:68:d2:13:1b:1f:c9:27:e9:b7:af:f0:da:
d1:f6:f5:48:d0:86:6a:03:1a:69:62:72:22:0d:af:52:93:c5:
81:6d:ee:72:ee:4f:da:b5:e1:8f:5c:89:ad:4b:28:1b:65:61:
5b:97:be:fc:6a:b8:3a:c9:b8:c0:f0:b0:49:fd:13:56:88:e5:
21:81:21:6f:48:a0:dd:5c:e9:3d:72:c6:44:b3:1c:7a:4c:c5:
28:e9:87:a6:4f:62:81:df:ba:06:be:5b:10:20:4d:69:32:9c:
94:fe:8f:c3:18:d1:25:ba:ef:9d:51:88:ee:fe:64:87:1f:e4:
b0:82:8a:9e:32:4d:f6:a1:a7:0b:91:4a:fe:b1:e6:ff:7a:be:
4a:ca:95:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:29:00 2025 by rpki-client