Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/LHejYT8gYEZMhqUIlpTUII8kSF4.cer
File: LHejYT8gYEZMhqUIlpTUII8kSF4.cer (raw, json)
Hash identifier: LW0AvyrKtNn66GkvZskhYEJKZm/iMXjn79VD9rycUKQ=
Subject key identifier: 2C:77:A3:61:3F:20:60:46:4C:86:A5:08:96:94:D4:20:8F:24:48:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A189B3951A109CDD3498E27014DCDFEB8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/2/2C77A3613F2060464C86A5089694D4208F24485E.mft
caRepository: rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/2/
Notify URL: https://rpki.shrdserv.com/rrdp/notification.xml
Certificate not before: Thu 29 Oct 2026 22:06:50 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 218904
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:b3:95:1a:10:9c:dd:34:98:e2:70:14:dc:df:eb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 29 22:06:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c77a3613f2060464c86a5089694d4208f24485e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:5b:32:f9:d1:0f:f4:48:2d:b6:ea:a3:fd:
4e:aa:e6:8e:d5:b5:f7:50:8b:b8:f4:ae:58:c5:07:
15:5a:d6:ce:15:bb:4e:5f:f7:c3:be:bc:2b:7f:f2:
8a:97:b3:49:b3:32:6b:3e:0e:30:08:2f:b2:1c:0d:
08:22:ad:6b:ef:18:5a:a8:b3:9d:96:47:ed:65:15:
fa:d5:5a:51:86:6e:78:9f:69:9e:f9:ad:e6:f3:67:
9a:93:e3:b2:dc:08:ad:f2:7a:54:fd:9c:00:f6:c1:
31:7b:fc:84:7d:8c:ab:14:c9:43:7f:75:bf:38:59:
83:a5:c7:d5:dd:9f:7f:fa:82:b3:de:55:44:f6:22:
51:28:f0:1f:47:6c:ca:46:31:63:59:1c:fb:12:e0:
88:5a:24:af:f2:31:6a:da:7e:02:d0:6a:89:d3:12:
2d:1c:85:4e:cb:56:49:12:3c:73:95:8d:73:3e:db:
6b:46:d1:4b:ba:ec:80:0a:b8:06:2a:09:35:28:e7:
6c:a2:4c:60:74:b1:72:dc:ed:a1:1b:0b:34:97:ed:
ce:ed:86:cb:f5:e4:69:be:46:4e:9f:06:aa:61:9e:
ea:bd:e4:9d:f3:9c:3c:86:34:62:3e:bd:44:b1:9e:
5a:a8:84:71:b7:9a:8f:7b:e8:0e:2a:e0:a6:ac:13:
1b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:77:A3:61:3F:20:60:46:4C:86:A5:08:96:94:D4:20:8F:24:48:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/2/
RPKI Manifest - URI:rsync://rpki.shrdserv.com/repo/MYNOC-NEXTSERV/2/2C77A3613F2060464C86A5089694D4208F24485E.mft
RPKI Notify - URI:https://rpki.shrdserv.com/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
218904
Signature Algorithm: sha256WithRSAEncryption
94:17:ba:67:b0:e0:9b:02:ca:b9:af:d2:44:92:53:2e:3d:03:
fc:77:4d:41:45:bd:36:46:ae:58:21:6e:6c:27:45:d5:14:dd:
23:68:39:e9:f0:6f:72:69:8a:7e:77:df:98:1e:9f:87:ff:e6:
c2:e5:91:5c:c2:a8:ee:51:48:23:d8:d2:b9:38:81:ee:37:8c:
ed:d9:d3:6a:4f:04:d7:17:e7:65:d8:8b:aa:8d:b8:b8:8a:a2:
84:14:e7:d8:ad:b7:e5:36:a2:7e:a5:b1:ab:e6:2a:69:34:06:
41:bf:14:32:5f:57:17:4b:f9:0f:85:65:4f:98:8d:a8:6a:51:
f5:0a:56:1f:ee:df:54:d1:9f:08:5b:e3:4c:54:79:54:2e:ae:
13:31:40:53:77:7e:68:9d:8f:5c:a6:73:f3:16:dd:46:2b:1a:
e8:42:a2:49:31:de:c9:a7:d1:ce:44:d4:63:ce:10:49:75:57:
67:c7:23:b4:32:eb:21:39:b9:c4:b4:8b:ae:78:6d:51:56:d0:
c4:24:23:10:2d:d0:b9:0b:ee:e6:ac:9f:4f:fa:73:6d:99:bd:
ef:d8:b0:51:f1:02:8d:a9:65:1e:b6:59:0f:ac:9c:7e:e8:cd:
60:90:3b:37:6e:8d:73:bf:bf:1e:72:93:99:26:ca:ba:d9:0d:
4e:35:35:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 21:46:44 2026 by rpki-client