Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hebJukv_0bW6FFCrXdaderdAEGA.cer
File: hebJukv_0bW6FFCrXdaderdAEGA.cer (raw, json)
Hash identifier: AZ82Ioqf64O1wkjTX2Y/5Wom41SOb3tw53piBTxzi0w=
Subject key identifier: 85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01994CB8AF92E65D3E7C0E497B32AE0CA7F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 15 Sep 2025 09:33:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216432
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:4c:b8:af:92:e6:5d:3e:7c:0e:49:7b:32:ae:0c:a7:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 15 09:33:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85e6c9ba4bffd1b5ba1450ab5dd69d7ab7401060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:f6:c5:2d:e0:69:96:2b:b6:13:82:63:2f:
92:c9:70:0d:08:6e:7c:0b:51:56:1e:05:57:11:3a:
61:72:f2:e9:80:4b:f4:88:69:47:91:d5:ad:ef:66:
e6:fd:fa:f3:ab:f4:c1:cb:1b:a9:19:24:6f:47:d0:
c3:8e:17:16:72:c2:45:11:95:07:d1:22:55:a0:3c:
dd:ed:45:d0:c1:47:a7:13:7d:83:8d:ac:3b:0a:03:
ec:df:21:61:db:ce:1e:b6:80:f9:4f:17:de:db:64:
ee:e7:ee:ec:a1:a5:74:dc:d3:80:db:3b:61:1c:4e:
b0:04:18:9a:74:55:e6:bd:90:7d:34:e0:36:cd:ce:
42:15:e0:14:6c:20:ec:0c:54:ad:3f:3c:2c:08:c1:
26:a3:c0:8a:2f:33:08:48:28:02:a8:ec:02:17:76:
8c:b9:88:fb:57:c2:a4:81:77:e8:83:5e:8b:2e:d2:
8a:7c:9c:f7:48:52:e2:b5:b6:9f:5c:1d:43:8c:67:
32:e6:7b:8c:9d:d8:7a:1e:aa:f9:8a:e7:20:aa:e2:
53:eb:20:15:32:58:56:04:01:f8:81:7a:24:82:c2:
c0:cf:55:99:56:8b:ce:78:e9:e4:1a:b5:22:13:49:
c7:2a:30:15:88:f0:18:fe:21:34:b7:5c:b6:0b:0e:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E6:C9:BA:4B:FF:D1:B5:BA:14:50:AB:5D:D6:9D:7A:B7:40:10:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/7b31db-8643-4815-807d-4e423ca50489/1/hebJukv_0bW6FFCrXdaderdAEGA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216432
Signature Algorithm: sha256WithRSAEncryption
8b:c7:1c:cc:cb:59:75:42:29:cc:4b:46:bf:48:d9:15:45:36:
83:c9:e4:21:46:a9:8e:30:f3:fe:cc:d2:00:f4:6a:9a:28:4c:
7d:e5:c7:51:ee:2c:e3:80:94:41:7e:08:59:7d:21:a7:f5:92:
d5:1b:2a:5a:c4:f8:1f:ac:f8:ff:09:1a:5b:1a:9d:88:e3:c1:
ae:b9:7d:88:5b:c6:4f:b9:09:1b:b6:10:e1:03:a5:00:79:bf:
00:06:31:3f:21:3f:18:81:05:1c:8a:36:92:79:56:94:a2:43:
c0:30:ca:e6:1a:64:a5:c0:0d:6e:9e:4f:aa:71:b3:df:52:c8:
51:a7:78:6e:a4:76:8d:1c:d2:d3:91:4b:d9:94:27:eb:63:21:
db:6d:ff:f3:51:fc:dc:56:4d:27:ae:dc:90:a2:d8:8e:2a:cc:
f9:32:1c:2f:e0:92:a4:d3:d9:d7:83:c1:a3:49:b5:b6:aa:f7:
53:64:e0:f5:b2:8f:69:9a:87:38:fb:f2:28:4a:70:d3:29:9b:
90:7c:92:87:4c:76:f8:bc:f6:ba:9d:d4:50:c7:87:1e:b5:67:
b7:36:9a:f9:e5:81:a6:91:32:7d:26:94:a2:c0:27:b0:89:aa:
23:39:79:42:6a:3b:e5:78:bb:0d:21:22:e8:4c:b1:6d:bd:98:
89:8f:08:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:31:14 2025 by rpki-client