Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer
File: bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer (raw, json)
Hash identifier: 8Rk8bzzOOC5ZqsiFb+ERD2lYa1QRvEWJDQsbLr+gg6M=
Subject key identifier: 6C:C1:85:02:45:D2:BF:0B:58:3A:33:9F:2E:B4:F7:C0:90:59:64:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01991995AFBEC3D44684A1C180C40DF0B782
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 05 Sep 2025 11:14:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44784
IP: 185.149.0.0/22
IP: 185.254.167.0/24
IP: 2a07:63c0::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 01:22:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:19:95:af:be:c3:d4:46:84:a1:c1:80:c4:0d:f0:b7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Sep 5 11:14:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cc1850245d2bf0b583a339f2eb4f7c09059640c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:16:c1:ae:1b:2e:cf:8a:30:3f:aa:0c:3b:
22:79:72:0f:fe:61:de:24:f9:98:f8:43:73:88:a5:
76:d3:b8:3d:db:1e:79:e9:80:9d:de:88:8d:77:8b:
7f:89:2c:7a:63:4f:88:b5:29:a9:37:74:2f:04:29:
7f:2f:ef:37:2a:3a:f6:82:97:1b:30:a8:93:92:9a:
69:04:b0:25:31:85:0d:14:cd:a8:3d:f0:99:b2:cf:
b8:57:1a:29:75:a9:54:38:24:87:72:93:17:4d:52:
a8:74:61:e7:3d:d9:09:22:30:4e:90:25:65:0e:49:
9a:06:4b:c9:c0:8d:a9:f4:45:ee:fc:20:7f:f0:ff:
b2:f1:1e:51:5d:83:0c:36:04:f9:d1:17:e0:91:9c:
3a:d6:9c:4c:65:55:9d:72:07:b6:95:4d:45:89:39:
9b:89:05:70:9b:e5:cd:37:d3:6f:09:b9:27:b5:23:
c0:7d:e8:3c:3f:9e:3c:7c:39:f4:d9:8a:1d:1d:38:
05:4f:3a:e0:f4:95:df:df:ba:37:59:51:e7:64:5c:
8c:f4:bf:c9:a0:60:b9:3f:82:79:94:e1:aa:64:e5:
7c:20:ac:bc:a0:eb:8b:90:ff:e1:74:df:9c:99:9f:
ea:7d:19:a7:21:28:5d:47:c5:01:b4:11:fa:f1:6c:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C1:85:02:45:D2:BF:0B:58:3A:33:9F:2E:B4:F7:C0:90:59:64:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.0.0/22
185.254.167.0/24
IPv6:
2a07:63c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44784
Signature Algorithm: sha256WithRSAEncryption
87:df:25:98:fa:32:b0:97:c0:c8:dc:5a:89:65:b0:f5:51:17:
80:10:5a:e9:6e:f8:2c:2e:d5:b5:88:fc:bf:5e:0e:68:cc:ff:
ae:67:33:4c:30:3b:53:15:50:fc:29:06:95:e0:46:1a:1a:8c:
23:b0:20:bc:ca:1e:33:65:fd:20:22:e8:86:1e:07:1e:68:31:
03:7e:eb:67:de:62:30:9e:ab:ee:44:bd:bd:38:a3:b7:53:2e:
1c:11:0c:86:fd:47:a6:22:a2:32:3f:f2:09:24:23:da:2e:51:
64:5e:45:d2:40:ee:62:4d:92:65:f9:fa:0b:37:6e:e4:fa:52:
bd:a6:cc:30:1c:74:d8:a1:b9:36:ae:8e:35:95:66:35:40:53:
78:ea:2a:7c:c0:46:29:9c:4d:11:ad:9a:bc:ac:68:a9:70:2f:
4b:21:ef:69:be:95:0a:56:55:ea:19:6d:c7:a6:8b:9f:46:ed:
45:cd:de:15:4b:66:e7:07:a7:a0:94:fd:c5:36:3d:bf:6b:1f:
4b:bc:c1:3f:72:52:19:6c:4f:78:7a:6c:25:ab:f8:af:b9:11:
21:10:01:d6:7c:f2:50:d1:10:05:e8:9f:2e:1f:8f:4d:66:66:
bd:16:db:23:04:f5:80:01:eb:90:60:0a:c0:99:64:d5:57:ec:
f4:05:1e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 10:28:59 2025 by rpki-client