Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/GHrmJafreY8V_B5hw-E3AaNW_hY.cer
File: GHrmJafreY8V_B5hw-E3AaNW_hY.cer (raw, json)
Hash identifier: qSOxfoBXO4AoUR1DkF2EmdPXGDLFLiDSJoh6IiujqBA=
Subject key identifier: 18:7A:E6:25:A7:EB:79:8F:15:FC:1E:61:C3:E1:37:01:A3:56:FE:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01980D96AC9844C77E9944F6BCDEF61F8C0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 15 Jul 2025 10:17:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205135
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:0d:96:ac:98:44:c7:7e:99:44:f6:bc:de:f6:1f:8c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 15 10:17:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=187ae625a7eb798f15fc1e61c3e13701a356fe16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:e5:c6:7d:c6:b2:b8:7b:f4:23:77:8f:64:
d7:d9:0e:c2:35:dd:60:c0:70:fc:9e:a4:e8:20:26:
98:42:01:a3:44:d6:da:07:89:ce:54:2a:32:fd:3f:
a8:8e:0d:18:64:0e:77:77:ce:70:fc:64:8f:66:a8:
c6:be:07:ef:d0:c4:73:46:db:7d:d0:7e:e3:d8:a4:
36:41:39:61:eb:1f:03:6d:e0:b9:7c:e8:a5:9d:2d:
34:36:17:0e:8c:19:71:5f:a1:0e:cf:e5:b8:f0:be:
f2:50:a2:41:64:dc:b0:6f:4e:30:5e:e8:e6:8b:3c:
c1:75:94:5f:83:49:d0:e6:b3:44:8a:c9:d4:58:63:
a9:34:43:57:84:16:af:2a:fa:f1:29:c9:bd:e1:67:
76:c7:22:57:55:7b:47:98:ee:0f:43:32:09:1c:78:
44:9c:ac:ba:43:25:c9:b6:d5:b8:54:82:66:62:89:
96:12:a1:a5:9a:90:6c:36:c9:02:53:90:ad:4c:9b:
72:a8:c5:52:fe:76:a1:41:22:da:07:33:d4:85:a4:
e7:47:fa:d3:06:d4:24:8a:90:da:c5:cb:e7:78:19:
e6:6c:72:4b:31:dd:f0:ea:a4:8a:37:bd:3e:41:9d:
ea:e8:43:de:69:be:40:0d:37:c6:f2:db:62:57:f5:
b7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7A:E6:25:A7:EB:79:8F:15:FC:1E:61:C3:E1:37:01:A3:56:FE:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9a5af2-5daf-400b-b91a-5c00cbe76f34/1/GHrmJafreY8V_B5hw-E3AaNW_hY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205135
Signature Algorithm: sha256WithRSAEncryption
36:09:e1:d1:51:ad:e2:4d:2d:00:40:d7:9c:f1:78:8e:d2:ac:
10:69:f9:dd:df:3f:0f:e4:61:38:c8:09:1f:cf:01:33:83:8f:
b3:33:55:04:e8:20:2f:f1:29:08:48:e0:4f:6c:1c:2a:4e:20:
f6:d6:00:a8:5d:ef:19:fe:22:23:b4:ce:f8:69:24:05:98:f4:
b0:1e:a2:2d:4d:5b:9c:f8:38:b1:fa:7c:e7:92:d2:92:b0:ef:
3b:04:e9:bf:c0:af:c5:2f:aa:80:69:77:62:6b:cb:c5:38:b3:
8e:88:ea:ff:41:d7:b0:d8:5d:2f:f7:6a:e8:89:7d:91:41:6a:
4d:93:91:8a:54:36:e4:17:a1:78:62:c5:96:ca:f8:47:53:22:
08:2d:f4:43:94:12:ce:06:90:11:2d:17:05:1f:97:75:9d:84:
6b:2c:ad:38:c9:f1:27:f0:fb:66:55:b7:8e:18:9e:4c:93:47:
1e:0b:c9:06:cc:9b:c5:7f:48:44:5f:2a:a8:b9:70:ae:8e:92:
9a:1c:9d:b9:49:7b:1c:cd:76:d3:2c:4b:2a:49:25:09:52:f5:
6c:77:11:4b:4f:41:5f:74:3c:4a:a9:29:66:97:48:87:bb:56:
9e:2d:92:ea:12:4a:2f:2a:86:19:1a:93:d4:45:a1:b5:e1:49:
26:fa:00:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 12:30:06 2025 by rpki-client