Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/He0k7ZHMvmiSBRbhtHBuXf9B19I.cer
File: He0k7ZHMvmiSBRbhtHBuXf9B19I.cer (raw, json)
Hash identifier: 5tM0uQttv/pUEmTIqXBmHHxddjWXs5NNKq37PbGaELY=
Subject key identifier: 1D:ED:24:ED:91:CC:BE:68:92:05:16:E1:B4:70:6E:5D:FF:41:D7:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F703766837AD3A643D5F036F60E32BE24
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.mft
caRepository: rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/
Notify URL: https://krill.clnexus.dev/rrdp/notification.xml
Certificate not before: Fri 17 Jul 2026 13:15:06 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 219189
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:70:37:66:83:7a:d3:a6:43:d5:f0:36:f6:0e:32:be:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jul 17 13:15:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ded24ed91ccbe68920516e1b4706e5dff41d7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0a:40:51:99:34:eb:e0:45:8b:bc:09:19:5a:
87:7b:d3:84:d0:40:e7:e4:a6:f9:cc:e1:bc:c7:fb:
2f:a9:88:2d:e7:1d:0e:6a:45:c9:ac:fa:46:6a:28:
4b:03:6b:f1:57:d8:b7:79:e4:52:18:04:90:2b:7c:
9b:d0:5d:73:8d:15:b6:dc:99:5f:f5:81:af:b1:ac:
ff:8e:c0:e1:64:3d:93:d2:be:48:cb:00:fe:65:30:
99:84:1a:50:9b:41:ae:bb:0d:d6:8f:91:fb:c3:ed:
ce:a2:c3:5d:22:6d:db:c7:c3:58:8b:38:c3:91:7c:
82:c0:85:65:cf:5c:a9:f0:6a:b7:e8:14:fd:02:8f:
73:66:a6:43:51:ac:41:17:1b:15:97:df:9b:6c:1a:
0c:b5:03:16:d4:3b:0e:f9:3f:42:d3:1a:4a:c6:b1:
74:bc:88:d0:c5:49:d4:4c:db:24:e0:2e:f1:4e:39:
94:b8:dc:ea:3b:9a:ae:7f:44:6a:16:91:12:d5:72:
06:0f:f2:0c:6b:70:85:b9:2e:09:33:64:88:6b:f1:
df:6b:99:6e:c5:d2:fe:29:f3:7e:54:f9:92:e2:02:
3e:19:55:cf:fe:05:5c:19:3c:86:75:0f:db:7c:7b:
ae:66:84:99:60:66:77:ab:45:bf:49:c4:3e:63:d4:
ee:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:ED:24:ED:91:CC:BE:68:92:05:16:E1:B4:70:6E:5D:FF:41:D7:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/
RPKI Manifest - URI:rsync://rsync.krill.clnexus.dev/repo/CLNexusLTD/0/1DED24ED91CCBE68920516E1B4706E5DFF41D7D2.mft
RPKI Notify - URI:https://krill.clnexus.dev/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
219189
Signature Algorithm: sha256WithRSAEncryption
ad:9b:22:1e:8d:7e:ef:1e:0f:77:d7:e2:cb:25:98:e7:7b:0c:
dd:4b:d5:34:c5:53:27:18:de:2f:a1:a6:74:1d:56:93:0f:de:
43:bd:93:26:24:1f:d9:1b:df:0b:63:c7:41:42:74:c0:49:2a:
e5:e4:c7:8b:d6:62:45:20:9e:11:85:17:0d:3c:20:1a:6a:5c:
66:51:56:4d:30:e9:af:94:a5:a2:3a:a9:83:f2:60:fb:7e:08:
80:6e:a2:b3:29:c4:33:2f:9e:91:14:e1:b4:58:ee:a4:7b:2a:
58:e1:4d:ca:12:82:fe:e5:cc:bf:53:9c:82:2f:94:0a:bb:ae:
06:97:44:cb:37:56:0b:4f:e4:46:ee:0e:f2:b8:1a:57:04:6c:
92:27:f4:da:63:09:4c:bf:73:21:9e:ed:de:bf:d3:a3:42:42:
97:0e:46:4f:bd:82:b3:ff:bc:69:c0:5e:f5:8c:84:b1:95:82:
52:be:47:9d:cd:5a:72:ff:87:ee:05:10:de:37:fd:4d:dd:1c:
57:f5:d0:18:96:a5:83:68:8c:5c:71:dc:6f:43:62:ec:f2:d7:
9d:93:4f:4a:11:a6:89:57:a5:8d:09:d2:51:45:73:3f:e3:fb:
73:eb:53:83:e5:1e:ec:4c:82:f7:65:28:79:1c:5f:85:e6:cb:
0b:24:2b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:22 2026 by rpki-client