Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
File: 1oFRD_A-lUZKxySioFlNpAfwWwc.cer (raw, json)
Hash identifier: BM306ybilx5jXS1rHOOcv9BjPgB2he8/DntS3dNLFrE=
Subject key identifier: D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019D4C01BFEA9C3DB13FBB747E59C76FBB2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Apr 2026 02:24:36 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199605
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Apr 2026 04:54:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4c:01:bf:ea:9c:3d:b1:3f:bb:74:7e:59:c7:6f:bb:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Apr 2 02:24:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d681510ff03e95464ac724a2a0594da407f05b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:b2:1e:ed:43:0a:e4:22:d8:22:1b:c0:51:
3d:96:4b:47:54:48:71:07:ba:df:21:25:73:32:00:
8a:d5:01:19:aa:3b:ef:bb:03:dd:af:9b:04:d3:97:
97:62:1f:ac:d8:b2:dd:2f:96:8b:a1:80:61:7e:21:
30:73:4e:c1:65:5b:f1:2f:65:a6:54:b9:bf:99:a5:
c4:c0:b9:e1:cb:2d:37:51:c7:7f:79:5c:e0:68:b6:
d0:cd:aa:1a:67:3d:d0:ab:b6:bd:b5:5a:b3:cd:2f:
37:cc:13:e8:34:ad:26:70:2e:f4:8b:39:10:4a:eb:
c5:87:ee:1e:83:cc:4d:bf:4a:d9:8c:7d:30:dc:01:
ff:3c:91:60:88:e2:66:28:15:49:5b:bb:1f:c7:d1:
73:06:19:3c:eb:f7:6b:35:dd:20:19:8a:2b:a6:9a:
46:3e:c5:9e:1a:3e:82:51:cb:cf:f5:e7:33:ac:dd:
83:7f:2c:e4:3a:c9:ec:c4:1d:a3:6d:59:71:eb:18:
2f:04:65:b8:f3:49:9c:80:95:bf:0e:90:0e:14:66:
b4:0d:7f:16:aa:d9:3a:3e:6f:5a:7c:c7:42:c6:d7:
51:80:19:4f:c1:e7:9d:14:a6:b3:05:c1:ae:f1:9b:
c0:c6:c8:82:41:36:c9:f2:dc:f1:ad:a8:66:8f:a4:
27:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199605
Signature Algorithm: sha256WithRSAEncryption
1a:09:4b:8c:e4:5e:19:c9:d2:68:82:27:12:25:2b:45:8f:46:
e0:49:6f:8f:1e:4f:16:59:7f:b6:33:f8:79:2c:8c:9b:41:77:
fe:6c:de:9f:fc:45:7f:fa:2c:ab:96:27:3f:12:79:19:e5:42:
57:64:dc:54:31:b2:a6:39:23:b8:d4:b8:66:e0:82:02:e1:a3:
c6:58:7d:68:24:77:5b:8f:85:bf:71:af:fe:b0:c6:f2:47:bf:
a1:e3:2c:7e:fe:10:39:bd:1a:dd:67:ea:a6:1d:43:73:b0:2f:
d1:e3:dc:58:a9:6c:8b:2d:3d:bf:7b:b8:19:b2:92:45:ef:32:
6e:20:19:e2:07:cf:79:a1:16:b3:21:fa:d2:20:4e:22:dd:a5:
ca:b4:53:09:29:65:c3:b7:e6:cc:c4:d5:15:7f:07:c2:2b:c3:
3a:55:59:0e:e2:6c:67:46:69:60:9d:2b:fc:01:45:ce:bc:51:
7d:7b:c6:2c:b0:34:fb:00:39:19:5f:8d:f2:57:3f:10:26:3c:
ec:dd:b1:9b:53:f3:ca:41:30:88:c9:50:13:83:cb:90:b3:34:
dc:e2:1f:47:e1:a6:b2:55:6a:83:07:37:a4:6d:23:1c:c3:24:
50:5c:d7:74:60:16:2e:4c:c8:fb:5a:2d:5a:a9:e8:9f:01:f5:
e6:21:6a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 13:14:07 2026 by rpki-client