Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_mraoZRFOXtBXvSivmTq_PNbcpA.cer
File: _mraoZRFOXtBXvSivmTq_PNbcpA.cer (raw, json)
Hash identifier: lRtCy9H9c67pLSOo2sZNEc4w5fyhKpzzgmGwmY0Y5Uc=
Subject key identifier: FE:6A:DA:A1:94:45:39:7B:41:5E:F4:A2:BE:64:EA:FC:F3:5B:72:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A38E7BEB6F94AE42D4E323D770C07161E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 31 Oct 2025 06:15:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 61303
IP: 31.31.92.0/22
IP: 91.198.2.0/24
IP: 185.11.252.0/22
IP: 185.233.188.0/22
IP: 193.142.157.0/24
IP: 194.0.135.0/24
IP: 2a02:ed80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 00:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:38:e7:be:b6:f9:4a:e4:2d:4e:32:3d:77:0c:07:16:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 31 06:15:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe6adaa19445397b415ef4a2be64eafcf35b7290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:7c:40:7d:89:e8:85:d7:dd:ff:0f:15:6a:
0e:f7:14:e8:71:87:94:90:35:8a:c0:37:0d:fe:6b:
e2:97:38:90:eb:c7:1b:48:7d:be:75:f0:14:38:31:
b4:f7:09:9b:50:ae:c4:a4:ee:11:b7:11:9b:e7:08:
c4:c3:a4:d6:24:38:ff:b7:a0:51:c8:cc:76:5d:02:
b2:a1:a3:65:2c:9b:66:e6:7d:f2:24:ef:37:e8:00:
bd:ba:1a:ec:7f:a5:53:bd:b8:61:47:61:4e:d2:d0:
c6:57:58:81:86:17:b7:97:0d:25:a3:c9:da:97:41:
9d:62:36:ed:18:8d:6b:70:9c:f1:e8:c2:54:5b:a5:
a1:a0:b8:b5:42:3c:73:69:40:2b:38:45:a5:a3:fb:
19:f7:16:6b:93:44:20:dc:1b:85:34:74:1a:88:ec:
cc:de:fd:73:3f:da:67:dd:b7:a1:32:84:57:c2:88:
73:0e:ed:d9:40:1a:55:4a:7a:28:dd:27:cb:98:24:
de:46:05:cb:a4:07:1f:7f:23:cb:cd:33:cb:e3:7f:
24:cb:9f:8b:f2:4e:5c:61:68:32:d4:5e:f0:cc:83:
ce:c5:82:47:73:db:fa:d4:22:7e:82:ad:84:34:29:
4c:55:f5:d2:16:2d:ae:d2:5b:03:6d:b6:f4:07:74:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6A:DA:A1:94:45:39:7B:41:5E:F4:A2:BE:64:EA:FC:F3:5B:72:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/8271f1-6fb3-4e2b-a79b-e309b09d1d57/1/_mraoZRFOXtBXvSivmTq_PNbcpA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.31.92.0/22
91.198.2.0/24
185.11.252.0/22
185.233.188.0/22
193.142.157.0/24
194.0.135.0/24
IPv6:
2a02:ed80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61303
Signature Algorithm: sha256WithRSAEncryption
51:61:f9:12:f2:8d:72:37:07:8a:f9:56:f5:04:f7:8a:2d:52:
15:9e:89:f5:c3:3d:69:af:00:ae:00:da:a7:b2:2e:42:5c:ec:
aa:d3:26:6b:89:e1:19:72:b0:5e:2d:47:c3:62:5f:e4:93:13:
80:da:a9:ee:c2:8c:79:94:4c:75:e3:bd:97:e4:aa:4a:e8:6c:
e6:ae:6b:fe:ff:14:39:fd:d6:b3:eb:0e:b2:0f:13:2a:1b:ff:
9f:bb:6b:b4:c0:af:4e:c2:5f:71:73:1e:78:4c:2f:8a:55:d5:
c1:a4:1d:f5:6f:62:e8:c2:58:51:fb:17:e9:15:0a:3f:f1:d8:
41:cc:36:50:58:39:07:0d:d8:5e:6a:7c:84:4b:87:b1:6d:24:
ca:fc:a6:e9:2d:67:f7:26:0d:c1:81:8c:ed:93:cf:29:ca:dc:
fa:4f:3e:59:93:38:69:7b:94:5a:40:da:24:84:ce:cb:4c:2b:
f2:12:f8:68:c7:88:c4:12:95:d8:4e:ab:c1:c2:42:f8:78:47:
6f:a4:24:ad:d8:f6:68:5c:4f:c3:65:fb:02:9d:f3:a1:ab:bf:
7d:52:ca:54:6c:f8:8a:0f:24:e9:7b:50:2d:10:09:e2:d9:01:
de:70:10:1e:a4:8c:0a:42:f5:b3:cb:1d:30:7b:c5:a8:6a:31:
6e:fa:36:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 10:03:53 2025 by rpki-client