Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.cer
File: eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.cer (raw, json)
Hash identifier: OlCQpvuXTtwfrRiAm4Da1qDVhYw1PI9aa/7chjjFhUw=
Subject key identifier: 78:31:C6:91:2F:11:C2:DF:E9:2F:EE:14:93:53:AA:8E:6D:98:09:BD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019EB073498591605A02E0C9AEF897EC2CBB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 10 Jun 2026 07:33:26 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 216058
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:73:49:85:91:60:5a:02:e0:c9:ae:f8:97:ec:2c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 10 07:33:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7831c6912f11c2dfe92fee149353aa8e6d9809bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:42:f1:7e:e8:d7:e3:2e:ca:43:c5:68:05:e1:
dc:d1:52:ce:c6:0b:e7:a5:19:a3:c1:ad:d4:e7:ae:
76:7c:ef:70:ab:15:c0:bb:f8:91:8e:e8:c9:a6:70:
69:a1:76:8c:24:8f:23:7b:e3:e6:b1:f9:d9:d0:8e:
7e:40:20:4d:52:18:56:30:96:9d:14:88:a5:3a:83:
65:c9:18:49:20:83:34:bb:5d:4e:7d:7c:95:c0:b6:
6c:9c:7f:a4:3d:29:37:8c:27:c9:fc:60:11:2d:37:
7a:20:85:e4:b4:c9:0f:03:36:a9:fe:62:b3:02:bf:
30:c6:2b:d7:bd:c2:b1:80:e2:51:ac:8f:b4:35:90:
5a:fd:87:be:2f:84:72:c5:e1:a6:74:ff:50:79:f3:
2e:33:d1:7f:56:ff:f4:95:3f:df:16:f4:b2:52:b8:
e5:e0:4a:af:87:a4:5b:39:1d:ee:66:1a:1a:f0:c4:
45:6d:8c:64:10:f4:c9:5e:f9:aa:87:ec:d1:9a:a2:
30:4f:5d:65:28:b6:f6:98:9a:40:6f:7e:ce:42:43:
a6:53:a8:80:9d:93:41:45:a8:cc:d9:04:02:8e:bf:
fd:ec:51:3a:9c:5a:eb:16:80:0e:0a:07:67:5d:b4:
4b:71:1c:0d:ce:06:17:94:fa:3d:ef:fd:10:6c:f3:
5a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:31:C6:91:2F:11:C2:DF:E9:2F:EE:14:93:53:AA:8E:6D:98:09:BD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216058
Signature Algorithm: sha256WithRSAEncryption
48:2c:e1:75:4d:5d:48:26:7d:8e:f2:39:0f:ea:3f:f4:61:3d:
ab:95:b6:89:44:81:ad:e6:7f:b2:d7:89:ff:fb:88:d0:b4:3d:
ec:45:c3:5e:14:fc:da:4e:ca:b3:d2:76:2b:69:bd:fd:de:db:
e9:68:32:f3:6d:15:56:c5:36:4c:1e:04:d2:28:d2:72:2e:c4:
9d:53:f1:3b:07:b1:cc:6d:94:d3:06:40:3c:43:1b:93:7e:d6:
69:15:14:b9:4c:65:37:a2:26:b4:d1:b2:d0:5f:56:f3:da:aa:
60:25:43:1e:86:98:61:70:84:fb:9d:45:bf:ee:13:7d:17:f1:
df:5f:35:7a:01:b3:e6:a7:45:94:48:05:62:7e:fd:92:4d:86:
d9:7d:86:0d:26:21:8a:a2:6a:a7:e7:eb:2e:fd:7f:aa:c6:05:
21:de:bb:28:2e:fc:98:e1:d6:e0:a7:09:c8:bd:7e:d5:8e:37:
eb:a1:bd:5e:27:43:2b:dd:d3:59:33:5f:2f:00:35:a8:32:b4:
b2:5c:1b:56:4d:dc:9e:00:30:b9:f1:c4:a3:03:96:c3:86:70:
f1:3f:b6:aa:6f:2c:c0:ab:f5:19:19:85:f5:66:5b:d1:19:77:
9a:c7:60:2b:1f:5a:b5:ce:c6:21:e5:b0:e9:2f:be:44:17:d7:
e7:07:b0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:43:23 2026 by rpki-client