
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MRRFNToII-2u8So6M1b6gJjhXqw.cer
File: MRRFNToII-2u8So6M1b6gJjhXqw.cer (raw, json)
Hash identifier: aI8/3yHy8wEy+g7XB7mPrGptDu85zm8HMkWxe1tzWXg=
Subject key identifier: 31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0199A51717F8AFE56F15C547EFD76EB1D31D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Oct 2025 13:22:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205037
IP: 161.51.255.0/24
IP: 193.23.163.0/24
IP: 2001:67c:1820::/48
IP: 2001:67c:2c6c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:a5:17:17:f8:af:e5:6f:15:c5:47:ef:d7:6e:b1:d3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 2 13:22:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=311445353a0823edaef12a3a3356fa8098e15eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:6c:3c:60:38:e7:80:b8:5a:19:ea:f4:7e:
af:2a:8a:60:e8:80:8a:b4:91:e2:62:09:80:56:d4:
59:c1:1d:3e:88:b8:ac:84:7d:ed:8c:aa:15:48:ab:
ae:03:11:95:40:89:7e:23:65:d9:86:bd:f7:30:fd:
d1:77:2a:d6:de:c0:87:3a:26:2e:29:97:c0:9f:b6:
1a:c0:f9:94:77:2f:90:92:ae:27:22:ba:b3:05:e7:
d5:91:af:25:94:4f:6d:c7:46:d4:a0:a9:2a:f0:76:
25:17:87:20:67:ce:58:cd:da:33:96:5d:f9:f4:19:
16:5f:31:37:68:08:66:85:d6:c0:07:64:dc:55:38:
44:1a:9b:18:bd:4e:c4:47:ba:d8:07:79:3b:f2:31:
8b:27:fa:bd:e9:0c:86:3d:dd:bf:cf:a9:13:dc:c2:
5e:1f:88:38:c6:d1:5a:f2:1d:08:c4:a1:bf:b8:7f:
b6:fe:45:41:3e:d4:87:1b:53:c4:2a:ce:b3:4f:04:
81:ca:cd:37:f9:aa:d2:f0:e8:e4:c9:3e:2b:aa:48:
55:c7:90:e8:c8:ec:c1:a9:7c:b9:55:16:a7:f3:05:
b4:36:ed:ce:f5:3b:36:98:b6:38:31:f5:5a:8c:57:
18:73:c3:e4:24:08:17:f8:86:b9:49:20:62:2d:38:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:14:45:35:3A:08:23:ED:AE:F1:2A:3A:33:56:FA:80:98:E1:5E:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/69b08d-7c97-432f-b4bf-51e821d23141/1/MRRFNToII-2u8So6M1b6gJjhXqw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.51.255.0/24
193.23.163.0/24
IPv6:
2001:67c:1820::/48
2001:67c:2c6c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205037
Signature Algorithm: sha256WithRSAEncryption
42:e7:0e:ce:a5:63:d8:3e:5c:e2:9a:d3:e7:ca:79:c1:8d:e8:
71:c1:b9:7c:76:dd:d8:61:30:e5:80:48:c3:66:89:5c:9f:07:
50:c4:c1:2e:c1:63:7b:b8:3b:c9:19:0e:55:22:ea:e8:96:e2:
0e:73:f8:20:78:85:7a:ee:87:02:e3:f9:a7:74:0e:ea:e0:30:
50:3e:2d:69:c4:49:05:72:5a:4a:83:96:34:fa:f9:e2:5f:0a:
ba:b0:0f:66:b6:fd:e8:46:9d:c8:11:d2:12:b0:46:a2:c7:91:
75:37:83:10:0f:d9:25:1f:97:06:17:b1:31:3b:98:a2:49:a0:
01:f9:b7:a6:93:90:98:f2:f7:f2:0b:38:44:b7:da:68:e9:af:
5a:ad:d2:60:60:cd:01:02:0b:64:76:30:28:74:fe:0e:ed:f3:
9b:28:76:c9:55:17:65:b0:a8:3c:60:f1:48:d4:b7:c1:bd:fa:
44:1a:f3:a7:3c:4d:d1:80:8f:a3:11:4e:06:43:94:4b:3b:41:
74:dc:75:6e:c8:a8:db:98:c2:1c:07:83:39:8c:0d:c0:b5:74:
96:c1:dd:45:3b:f2:cc:c2:b6:b3:ba:8b:af:17:e0:5f:e8:38:
78:bf:fb:e1:0e:1e:81:74:85:a8:3c:b5:c0:69:d6:5a:c2:82:
9a:4a:44:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:50:58 2025 by rpki-client