Certificate
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bM5r1eu-5htShsa9-g9HQak5WVs.cer
File: bM5r1eu-5htShsa9-g9HQak5WVs.cer (raw, json)
Hash identifier: 0uw8wBugfdqENxH6WHprm+iKNu8XCvBw2oXAEGtF55o=
Subject key identifier: 6C:CE:6B:D5:EB:BE:E6:1B:52:86:C6:BD:FA:0F:47:41:A9:39:59:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01A0EC76B9D5C70E00FA8217C047C7669F94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/218945-673f-4162-9909-72a1f5616110/1/bM5r1eu-5htShsa9-g9HQak5WVs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/218945-673f-4162-9909-72a1f5616110/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 29 Sep 2026 09:19:58 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 91.245.213.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:76:b9:d5:c7:0e:00:fa:82:17:c0:47:c7:66:9f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 29 09:19:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cce6bd5ebbee61b5286c6bdfa0f4741a939595b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:c4:d7:5b:b9:cc:f2:65:db:a4:37:84:2f:
30:22:53:98:68:26:36:1c:e7:e9:5a:f5:2a:51:aa:
a7:33:28:1d:01:79:7f:d3:0e:08:b4:8c:49:80:09:
c7:73:aa:8f:fb:a0:7a:2d:3a:01:6d:d3:60:f4:89:
23:54:c1:2a:ad:1a:f8:53:22:35:df:6a:7f:1c:66:
f3:8f:44:8a:4e:8d:a4:91:83:3e:e9:3f:c2:66:82:
93:cf:e3:52:d1:34:8c:4e:3e:b9:c8:61:22:cf:bc:
3c:e4:39:c2:de:6a:cc:8c:f2:9d:4d:e0:16:9f:aa:
91:47:5a:4a:44:1b:a4:93:2a:34:ac:73:a0:7d:2f:
a5:82:7c:ea:64:d0:d5:ee:a5:85:7b:2f:1e:af:f7:
72:49:60:39:a5:e4:1a:af:1a:4d:1c:ca:8e:0f:d8:
a0:48:6f:90:6a:90:4d:dc:70:88:0c:32:a0:37:79:
8c:e7:04:0b:4d:55:1d:5e:d4:85:87:87:a3:88:38:
a6:d5:b4:59:30:b9:4e:db:50:34:6f:c4:0d:a2:b9:
51:29:7b:6e:90:90:9d:ed:ba:09:a8:0e:a4:ce:63:
16:5e:a5:50:63:43:02:8b:04:1b:6d:33:bb:33:66:
23:b9:b7:09:00:72:17:c9:5e:91:08:1e:00:a3:c1:
97:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CE:6B:D5:EB:BE:E6:1B:52:86:C6:BD:FA:0F:47:41:A9:39:59:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/218945-673f-4162-9909-72a1f5616110/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/218945-673f-4162-9909-72a1f5616110/1/bM5r1eu-5htShsa9-g9HQak5WVs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.213.0/24
Signature Algorithm: sha256WithRSAEncryption
34:0b:de:0c:43:d8:83:52:a5:b8:35:5b:4b:81:ee:a1:27:52:
ff:05:46:db:f1:29:15:8b:d2:2a:98:22:52:1d:e5:ac:b4:9e:
f3:17:cc:0a:11:cc:f2:df:96:14:82:58:d9:2c:a3:57:e2:07:
89:ae:6b:a6:cd:c7:4c:6f:a0:28:54:bd:96:2d:e7:15:37:f6:
c1:ee:11:20:0b:70:e0:4e:2b:7e:8c:a6:07:f0:7a:25:cc:ed:
66:34:ac:98:d0:10:8e:e7:11:a3:5f:4b:37:53:ae:98:72:b8:
9a:4f:d4:a2:fc:01:30:56:68:93:1d:ed:2d:4e:d4:e1:53:36:
ad:bf:b9:63:e5:a9:7b:33:84:48:e3:72:e1:2b:94:32:7d:9f:
be:5d:cb:96:91:27:e1:fb:dd:1a:44:58:35:13:e0:3a:0b:7c:
d7:5e:f4:5a:2d:f1:df:18:23:64:6b:33:9b:89:39:34:61:e4:
6d:33:06:18:a4:94:12:44:b3:47:75:11:02:4b:26:ce:90:0e:
5f:4c:4c:0c:a8:4b:38:33:56:c8:19:84:72:00:20:8a:ca:62:
41:2e:7f:f6:c5:c6:c4:bc:21:f6:80:b9:b4:3e:b6:a9:a0:a0:
9c:a9:0a:c7:19:e7:85:67:8e:65:e2:af:6a:26:60:52:16:f5:
20:63:ae:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 21:59:07 2026 by rpki-client