Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EhUnja0kcXUT6SNaFXBapGfdYgU.cer
File: EhUnja0kcXUT6SNaFXBapGfdYgU.cer (raw, json)
Hash identifier: ZHmLxVWFTilhTYTTXwVJFvvyGgn98XvNwmpQprGcxMw=
Subject key identifier: 12:15:27:8D:AD:24:71:75:13:E9:23:5A:15:70:5A:A4:67:DD:62:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A64C170B8637B55F824DB4D03AA8359EB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 08 Nov 2025 18:36:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210796
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:64:c1:70:b8:63:7b:55:f8:24:db:4d:03:aa:83:59:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 8 18:36:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1215278dad24717513e9235a15705aa467dd6205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:51:6c:00:6b:31:ab:64:fd:65:86:e9:c6:6a:
98:86:d2:4c:92:56:e8:ea:62:2d:62:ef:c9:d3:e4:
74:14:30:f2:06:31:ab:e2:04:1e:30:c1:50:f6:a6:
93:97:08:f8:ef:4b:00:ea:b9:9c:65:1d:96:d4:2f:
6b:e8:89:c7:d0:96:df:ab:98:f6:41:74:71:5a:9f:
b2:de:2f:5d:63:68:fc:ce:3e:9e:9b:2c:be:5c:a4:
c2:0b:24:1c:ab:06:d7:f2:df:16:d4:dd:b8:22:ea:
24:d5:8b:f0:c4:29:51:54:5d:0b:f8:2a:e8:8f:c2:
78:f6:a7:e3:d4:d1:76:77:a1:3e:2d:48:a4:e3:de:
8c:8e:54:ec:55:13:05:4a:cd:fb:dd:84:ae:b2:67:
26:f0:14:f6:51:2f:02:5d:76:2d:3d:04:5a:d2:e8:
f6:3f:a5:73:80:1c:da:da:31:86:fb:e1:b1:9e:fd:
97:33:64:e2:c1:f0:b9:2f:52:da:5c:8b:64:99:88:
1d:71:9f:d8:d5:a2:3d:4b:0e:41:52:8f:ac:77:34:
b8:59:14:2a:04:80:09:f0:82:8e:a9:ec:69:8c:a4:
32:99:f4:97:4e:93:43:7f:c8:96:30:ab:84:ef:f7:
59:b7:52:e3:f4:ec:f5:19:73:9d:5b:e5:66:80:3c:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:15:27:8D:AD:24:71:75:13:E9:23:5A:15:70:5A:A4:67:DD:62:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/b8844318-35d7-482e-bbd5-b624cf0b2041/0/1215278DAD24717513E9235A15705AA467DD6205.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210796
Signature Algorithm: sha256WithRSAEncryption
37:4e:9b:88:0e:42:fe:2b:4b:a3:f1:e6:f1:13:f3:5b:14:3a:
d3:de:52:24:f7:98:74:1c:20:9a:6c:6b:d2:ca:a2:0b:4a:e0:
34:5b:5d:06:af:7b:80:f0:4c:5a:a1:f7:17:8c:0f:01:2d:6b:
3c:9e:92:84:14:7b:75:75:87:f0:ff:ff:9a:3f:24:c0:69:d5:
82:d6:4d:ab:a0:31:f2:dd:71:45:86:4f:6a:c4:c6:84:58:f6:
77:4d:0e:07:ed:ca:7f:b8:ca:c3:6a:c2:e7:85:c2:1d:d7:28:
c8:3d:c5:5d:ce:f4:5a:b5:41:82:33:52:91:65:a9:c7:4e:c2:
d3:74:9f:92:66:19:f0:b8:5e:6e:d1:df:52:7f:a9:1f:72:fc:
69:84:60:10:b8:64:90:5d:58:6e:a2:bd:77:fd:df:5a:ed:fc:
0a:56:bd:50:41:4b:6b:86:db:9a:f0:fa:13:38:62:6e:54:87:
14:8a:04:6b:27:70:dc:b3:42:c1:40:f7:70:b9:ff:aa:81:2d:
71:cc:bd:02:5b:93:b0:78:53:d3:a6:0d:d5:58:25:64:95:8a:
2d:d7:f4:fc:92:ff:e7:2f:a0:86:53:6c:9c:e7:86:de:19:8b:
d4:08:db:85:56:fb:e1:d4:e1:5c:0b:15:c5:06:6b:72:38:99:
98:0c:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 10:03:50 2025 by rpki-client