Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.cer
File: CnmUaHLrVDhoSFj8hh7Sv2zOw1M.cer (raw, json)
Hash identifier: JpQ7IdUTAB8/4Y59FOtsXx8LZg8D7pm+ZF20Kc3VaLU=
Subject key identifier: 0A:79:94:68:72:EB:54:38:68:48:58:FC:86:1E:D2:BF:6C:CE:C3:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019E5EFF58A2DBE8E31976E641C36ECE3FF5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 25 May 2026 11:57:33 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: AS: 199804
IP: 2001:678:1214::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5e:ff:58:a2:db:e8:e3:19:76:e6:41:c3:6e:ce:3f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: May 25 11:57:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a79946872eb5438684858fc861ed2bf6ccec353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e4:a6:c2:b3:07:88:12:67:60:c9:a1:43:84:
ba:ca:40:60:4e:48:a0:a2:ae:a3:44:9e:1e:71:c4:
d1:af:67:e2:14:c5:13:15:65:fb:49:9a:44:8a:7b:
d1:82:1a:7b:fa:8d:fe:91:e3:20:8b:e1:7f:d5:3f:
dc:6d:08:2e:99:77:e1:e9:fc:27:c1:fc:92:ae:39:
8c:42:57:85:d4:dc:20:5c:a4:0a:77:fd:43:b6:20:
59:6b:ae:ea:b0:91:4f:10:bf:3d:ed:05:e6:c3:58:
74:e3:12:51:5a:ec:b2:c9:bb:50:50:90:c0:b9:22:
88:b0:b7:71:66:19:f4:a8:65:92:a2:44:f0:7c:1a:
ad:98:c9:ad:2b:73:0d:ac:eb:45:51:da:e3:19:13:
e3:b8:32:2c:3e:72:bc:93:c1:2d:9c:04:4d:c5:64:
03:f3:fe:0e:35:16:19:dc:3b:0e:4b:e6:71:ba:59:
83:6f:a2:c2:fd:8d:3c:27:de:93:39:85:13:40:0b:
f2:53:ee:ef:70:c9:c0:10:36:57:33:e9:d1:8f:54:
89:5f:f5:74:fe:18:7c:ed:b4:d6:13:9f:bc:0b:43:
54:51:a5:1a:ba:21:e6:cc:81:c0:ab:06:d1:5b:df:
8a:89:32:fe:f2:0b:e9:9e:59:bb:57:61:ef:3b:38:
8d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:79:94:68:72:EB:54:38:68:48:58:FC:86:1E:D2:BF:6C:CE:C3:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4ae444-a95f-4623-98cb-5803ff72c907/1/CnmUaHLrVDhoSFj8hh7Sv2zOw1M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:1214::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199804
Signature Algorithm: sha256WithRSAEncryption
60:47:5d:e4:b6:02:9c:87:44:57:8a:e7:33:6b:98:9e:3b:d5:
14:6d:ba:1e:8c:a7:09:1d:fa:cb:5f:a1:14:9a:60:97:62:58:
8b:31:3e:33:04:ed:6d:31:d6:ba:f5:b4:81:74:7c:c7:1d:13:
2c:bf:ee:2f:d3:ca:65:33:ba:f9:5a:8f:f0:d2:4a:e8:98:85:
75:09:7c:39:df:7a:73:bd:30:ea:0f:40:a9:fb:4c:fc:22:4d:
1d:f1:bf:81:af:40:b3:ed:2c:ab:61:c7:2a:d7:2c:db:eb:61:
5f:d0:db:97:c7:b5:42:59:0b:ce:93:31:76:25:ad:3d:a6:4c:
92:71:08:3d:0d:cc:c1:40:d2:fe:d5:b1:01:94:c3:48:60:c1:
a9:bc:b5:1a:04:f0:1a:a4:63:da:49:5f:e3:b0:f1:90:02:ae:
12:05:85:a0:45:65:55:a6:c3:43:23:0c:af:65:a5:09:21:86:
99:63:24:0b:bc:ea:e8:08:ac:53:75:3a:8f:39:52:22:b0:64:
15:4d:aa:3c:cc:2f:02:05:ce:45:94:4e:c4:16:d9:0b:52:10:
0a:02:81:ac:78:31:0b:94:85:8f:f7:05:7b:1f:0b:55:7c:3b:
80:ed:1a:ab:c8:90:e0:27:92:8a:be:33:30:9b:cd:d2:87:fd:
7b:bb:3b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:02 2026 by rpki-client