Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer
File: hwNNK1ky3RSR3n__McfYOvcyBuI.cer (raw, json)
Hash identifier: mpYPI+hWDJGs45S3uj8oZqZ7w65v/6BZdDWOt0k7c14=
Subject key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019A078D07AA74B100C902685F79F057546D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 21 Oct 2025 16:14:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216471
IP: 193.36.94.0/24
IP: 2a13:aa40::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 01:29:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:8d:07:aa:74:b1:00:c9:02:68:5f:79:f0:57:54:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Oct 21 16:14:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=87034d2b5932dd1491de7fff31c7d83af73206e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:a1:28:0f:73:f1:03:16:72:7e:22:68:74:
73:6a:2b:ce:10:6f:c7:8a:3c:7b:b9:b3:91:39:36:
bd:d2:57:a4:b4:24:3c:87:4e:3d:f4:84:30:97:65:
01:c7:bd:05:8e:8b:6c:d0:7c:87:6f:6f:d4:f1:63:
33:67:43:37:f4:5a:a4:c0:4b:16:04:bc:e6:84:fd:
1a:b2:28:14:a3:d8:ff:79:de:ad:a9:a4:74:54:99:
f7:e0:b0:4b:6c:9e:69:91:65:e9:8a:da:24:b6:b1:
b4:21:0f:87:b8:cc:34:e0:19:39:c4:fe:a7:12:22:
df:4c:88:c4:02:53:80:01:27:c7:75:c0:40:fc:38:
01:32:be:c1:b3:dd:99:76:92:f6:7d:7a:4f:f0:39:
5b:5b:8e:30:7b:d0:88:b3:1f:fe:72:88:cb:80:e8:
dc:86:7f:cf:2d:53:dd:e6:2a:63:17:3a:72:f9:3e:
64:b4:df:cc:16:d4:a2:be:be:73:ef:70:9e:04:d4:
67:57:84:a2:ab:84:47:e2:d3:93:ea:ff:e0:68:08:
7c:7a:5f:df:20:ad:41:37:9f:c7:17:ab:05:c2:61:
a4:02:d1:30:a5:a2:c3:6d:d8:66:35:f6:62:06:34:
56:c0:ed:c9:22:dd:fb:3e:c5:64:90:a2:fc:01:fd:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.94.0/24
IPv6:
2a13:aa40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216471
Signature Algorithm: sha256WithRSAEncryption
6a:a7:0e:a6:74:87:dd:08:d6:f1:4a:4f:43:fb:a4:1b:15:59:
98:06:b1:13:d8:40:f9:63:00:28:cb:a9:74:94:3b:99:45:d8:
52:d8:ae:07:68:aa:5c:23:19:aa:20:2d:6b:d5:04:03:bd:75:
75:28:e4:d5:1e:a5:6e:a1:c2:97:47:d7:8e:7c:e4:03:63:6e:
08:bd:39:dc:60:7c:74:94:7e:22:04:66:ae:1c:a7:25:8f:bd:
5c:cb:55:59:3b:de:d9:95:09:a6:f6:86:b0:48:57:7f:53:ba:
24:f1:b4:ae:12:14:40:f8:2d:ee:d2:57:70:44:28:87:18:61:
0b:2c:c5:69:fd:fa:65:ab:77:d2:38:e8:d9:43:33:f6:3c:bd:
e9:9c:63:8e:d4:be:04:c5:69:c1:a6:7d:1b:92:c0:6e:c2:99:
20:7d:78:a8:0d:41:01:56:bc:54:35:b9:90:18:a5:0c:46:eb:
85:56:90:18:77:6e:c1:0b:c7:31:87:62:da:e5:aa:f0:d2:21:
dc:c2:47:36:ac:7c:9c:20:9c:02:e4:9a:09:ec:a6:dd:1c:5e:
11:64:32:69:61:15:5b:92:e3:4e:a4:0c:bf:ee:48:5f:c4:ae:
18:e5:a7:6c:65:96:39:3c:83:fb:7e:55:fa:30:78:7b:94:94:
15:3a:02:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 07:10:21 2025 by rpki-client