Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NpgLSGOkwPwQnpM6n494kuQmIvg.cer
File: NpgLSGOkwPwQnpM6n494kuQmIvg.cer (raw, json)
Hash identifier: B4DHtpk+4fGUWmSCSy4bVVtl7opl8s0g/zr3huiwaH4=
Subject key identifier: 36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D70FE6D5589C70FA6238D9C3967E83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.130.24.0/22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 20:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0f:e6:d5:58:9c:70:fa:62:38:d9:c3:96:7e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=36980b4863a4c0fc109e933a9f8f7892e42622f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:66:9f:cc:b3:2a:8e:a0:5d:94:51:d2:c9:
87:c8:1b:3c:c3:44:a9:92:7b:c9:bd:d4:10:06:81:
f6:64:25:2a:c1:30:df:7b:08:c0:58:03:46:90:97:
cd:8c:80:69:27:99:5c:6a:75:39:6b:24:c4:9d:62:
0f:ab:94:6b:0e:d0:c1:29:4c:30:dd:14:d9:22:39:
02:41:20:4a:04:bf:cd:fc:9a:28:18:f5:cd:9c:59:
e8:c0:9b:06:38:d4:d6:a0:d0:de:8f:43:24:2f:2d:
7f:ec:5f:f7:01:6c:41:d3:b1:d9:e3:7d:e6:97:8a:
14:3f:6b:a7:c0:f1:be:0e:9e:ba:15:cf:43:78:df:
fc:62:38:63:e3:9f:fb:d6:42:5a:99:95:2b:31:2a:
ea:d6:3e:87:9b:b8:8f:4e:28:2c:1c:21:c9:44:a4:
5a:07:7b:e3:42:94:cf:17:ba:f7:65:5c:52:35:05:
16:2f:5d:4a:e8:1f:8c:7a:36:c4:81:cd:5d:ac:48:
d6:05:a3:a6:70:f3:e2:e8:05:94:1d:e4:14:eb:69:
eb:19:a9:47:8b:3e:06:a9:17:a8:44:94:3d:bc:ad:
d3:7b:cc:18:ba:59:1c:6a:bf:d5:42:9e:fa:00:a9:
c2:62:76:cd:2d:58:88:9c:76:97:2c:5b:d1:1f:28:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:98:0B:48:63:A4:C0:FC:10:9E:93:3A:9F:8F:78:92:E4:26:22:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f44b-3675-4ad8-a0ca-74ba26aaf1f6/1/NpgLSGOkwPwQnpM6n494kuQmIvg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.24.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:6d:d0:0a:43:1b:d3:c8:fa:7c:92:b6:dd:2a:8a:99:9d:8a:
c6:9d:90:df:bc:ad:f1:a9:26:98:f1:18:8a:c4:8a:b0:33:5f:
71:65:29:3e:43:cb:3d:5f:8a:e3:eb:6e:53:48:bb:36:f8:bc:
b3:f1:b6:8b:47:4a:b7:39:ee:07:11:f6:8d:c3:47:cb:1b:50:
e4:35:2c:50:a5:76:bc:8e:a9:bd:dc:86:27:81:70:77:4d:dc:
7b:e4:f3:3e:11:85:10:97:e6:c7:63:ba:c8:40:14:be:98:f1:
4e:36:c0:91:3b:54:8e:ed:13:1c:74:dd:3e:4b:a9:a0:b2:a9:
cb:8a:46:8b:a9:43:2a:6f:d7:32:eb:1c:73:4f:28:6d:55:a6:
b2:9a:49:ca:84:3f:46:0c:1b:d5:6b:5d:45:be:f8:f6:36:ba:
89:04:95:86:47:4c:1f:dd:5d:76:51:07:87:02:81:e1:a2:34:
98:ee:f4:55:1b:5e:d9:14:49:66:45:9f:13:46:4e:77:00:34:
e1:9c:10:e8:de:f7:16:b1:0f:19:36:d6:6b:6b:d9:1c:cc:8e:
43:a1:80:d6:9f:05:73:06:63:d6:29:29:f8:eb:8c:b4:9c:15:
9b:8c:e2:d9:ef:7e:b5:61:d3:04:49:fa:b4:3e:c5:14:08:5a:
7d:07:5e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:14 2025 by rpki-client