Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer
File: pEKhMJW3m8qG4s2gEuTEz2JGeWk.cer (raw, json)
Hash identifier: +Pl3F50IroFyeEq0aB+c2HC14Z+ANdb1HOyyksEFkRs=
Subject key identifier: A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01987F439AC72FDF0781F5672C730D4EA286
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 06 Aug 2025 12:03:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206781
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:43:9a:c7:2f:df:07:81:f5:67:2c:73:0d:4e:a2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 6 12:03:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a442a13095b79bca86e2cda012e4c4cf62467969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9e:89:f1:64:5b:25:92:88:05:4d:8e:db:95:
11:23:b1:26:aa:ef:36:3b:eb:a7:85:cb:59:4c:d8:
3f:b7:d2:79:5e:e4:16:a5:cd:c3:3c:bd:37:57:7c:
18:b0:f0:07:16:5d:15:d5:e1:1b:6d:ea:08:51:fb:
75:21:1e:d2:32:2f:e8:df:a7:91:c3:08:81:b9:5a:
84:1a:25:d3:40:be:3f:b9:67:e9:79:ec:e4:21:75:
c0:6d:a3:6f:70:15:b6:78:1f:6d:a1:84:3f:c7:89:
f9:8d:07:a6:de:1f:c7:55:7f:51:67:ac:25:c2:57:
18:af:66:67:17:f8:67:4c:88:5e:fd:4a:c7:f3:a8:
3e:a1:0c:ba:15:26:3e:29:e6:98:c4:10:d5:fa:bc:
9c:35:e5:33:6a:84:3d:aa:86:b3:d8:a0:ff:b4:44:
a7:9c:f2:3d:2c:37:cd:7c:b7:b2:4e:00:b5:f5:55:
a9:ae:83:b0:58:f4:93:87:ee:e7:50:ef:31:03:fd:
d9:fc:3d:d0:73:dc:75:c0:7e:01:c9:4b:bf:a7:04:
a5:fc:53:28:7c:5c:2b:91:fd:79:ec:48:e6:3b:65:
00:7f:d5:54:0c:5f:83:a6:29:2f:8c:07:fa:b0:63:
b6:7e:59:7e:e2:d3:3f:db:b5:7a:3d:9a:d6:23:84:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:42:A1:30:95:B7:9B:CA:86:E2:CD:A0:12:E4:C4:CF:62:46:79:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/ebe991-2eb4-4219-b367-0ebfcf38cbef/1/pEKhMJW3m8qG4s2gEuTEz2JGeWk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206781
Signature Algorithm: sha256WithRSAEncryption
aa:3c:99:10:88:58:c6:17:66:9e:16:65:18:32:a3:1d:b6:f7:
55:de:74:d6:5b:4a:54:fc:e3:cc:2e:1c:54:29:23:86:ef:63:
c5:e3:cd:41:7a:29:b6:f5:19:ca:be:43:01:88:5f:1d:d1:ae:
9b:25:85:61:70:35:5a:2e:62:68:ad:a0:1a:46:84:c5:74:76:
ab:e8:13:cf:a5:86:14:41:ea:87:a8:0b:67:1f:0e:44:a3:7d:
c3:30:c0:8c:10:9b:03:9c:72:8b:c3:55:17:45:07:23:57:c4:
1f:41:0e:c8:33:f8:bd:50:ff:94:df:28:83:a5:0b:cb:ce:f3:
0a:45:15:4f:1a:65:cc:b4:da:4c:4b:44:a1:2a:b9:ee:cd:e0:
23:2e:7b:c0:3d:95:11:52:e4:e0:6e:68:c1:f5:42:bd:46:dd:
e1:d2:69:bb:df:7f:c1:34:7c:80:33:36:5f:50:04:5b:f2:c1:
55:4f:f9:ea:74:c8:5c:d4:4f:e9:98:f8:50:c7:99:5c:03:28:
c2:57:a7:32:f6:15:3a:40:94:38:5b:4b:9a:c5:e7:42:e0:3e:
50:2d:09:32:d8:c7:bd:d6:c5:65:d0:dc:24:3a:94:13:ad:2c:
2e:0d:d7:88:08:15:07:18:2e:b4:65:71:8a:6f:8c:e6:19:19:
eb:a9:7b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:55:42 2025 by rpki-client