Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NCUppgkAWDTcELW4AP5TEMWMxH4.cer
File: NCUppgkAWDTcELW4AP5TEMWMxH4.cer (raw, json)
Hash identifier: YXR1rgvP9Dv5QIaqYwWh2mL9vSRktK1yA+7EU405OFg=
Subject key identifier: 34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01949DF0058CA79DC2FB93DC5DF5D77D80A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 25 Jan 2025 14:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 109.70.73.0/24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 21:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9d:f0:05:8c:a7:9d:c2:fb:93:dc:5d:f5:d7:7d:80:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 25 14:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=342529a609005834dc10b5b800fe5310c58cc47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:19:b7:3f:e9:08:6d:46:06:51:a8:26:71:
a5:e8:c6:cb:bd:3a:c0:b0:3b:bf:c9:d6:ce:39:14:
60:a8:72:fc:1b:2c:93:56:bd:d8:be:da:39:79:41:
98:dd:f4:d1:ae:91:55:c8:ba:0f:b0:4c:ab:14:e1:
a3:78:bc:b5:87:dd:42:e4:46:6e:9a:24:28:25:12:
4a:0f:a3:95:b0:e1:b3:d6:13:12:ce:a5:d7:34:94:
80:ed:de:05:41:72:da:6d:c4:88:98:ab:eb:8e:37:
bb:30:55:30:6e:a8:0c:68:ea:f7:0d:3d:ce:3e:52:
36:b6:f9:cf:e7:0b:c6:23:13:e1:6a:dc:95:6c:6f:
11:07:c8:cd:5c:0d:ce:a3:da:42:bd:a2:77:a0:4a:
b8:27:10:e0:70:52:e9:30:36:b3:44:c8:48:3f:d4:
27:86:55:04:ec:f9:bb:c7:f4:c3:7e:5d:31:45:33:
a4:7d:6f:80:ed:c1:e0:07:1f:b4:d3:46:ec:40:21:
10:23:23:de:57:8d:99:d3:54:a2:e6:eb:95:80:b6:
96:ec:04:b9:dc:40:77:14:dc:ab:da:e2:08:7f:80:
c6:48:dc:59:87:be:ff:71:66:7a:9d:22:6f:41:80:
2f:1c:1e:82:91:d0:ac:5a:85:55:c3:98:91:1b:75:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:25:29:A6:09:00:58:34:DC:10:B5:B8:00:FE:53:10:C5:8C:C4:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c3e6df-0815-4d33-b08c-caeb1c2809a8/1/NCUppgkAWDTcELW4AP5TEMWMxH4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.73.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d8:18:69:9e:38:8f:7c:39:d1:27:b8:5c:32:fe:a8:a4:d6:
07:3d:9f:13:34:5a:1b:78:29:5f:ec:29:7d:05:af:28:aa:c0:
6e:7d:ea:24:bc:ab:10:ec:66:b5:88:36:ff:27:4c:1a:cb:e9:
5e:76:fa:70:ee:97:63:6f:a0:c3:70:1e:1d:64:10:ce:d9:cc:
2d:74:f1:ce:dc:41:cb:00:a5:d8:c2:d9:ac:0a:ca:52:1c:b3:
2d:cd:6d:c4:bc:2c:5e:e8:db:55:5a:b7:36:3a:4a:78:72:b8:
fe:62:a1:1d:c0:6a:64:22:a8:0d:a0:27:58:87:fb:e0:bf:df:
dc:7d:78:b3:b6:1f:ff:e3:c8:63:05:6a:ba:91:5a:34:c8:e4:
e0:b1:57:70:63:ef:2b:ba:b2:be:8f:fb:3f:92:9a:76:41:15:
3c:47:f9:fb:5b:3d:fb:09:af:4b:fa:5e:7f:20:8c:77:82:a6:
f0:78:80:83:b8:8f:8f:49:36:9a:c0:05:51:c7:50:cb:14:ae:
c8:d1:d0:62:d4:5b:d6:96:80:36:b0:4c:40:b0:f5:cc:ed:a9:
db:15:a7:53:13:11:dd:52:67:ba:68:71:3c:ef:eb:c8:8e:2f:
f8:1f:18:1c:61:64:60:7a:08:2f:bb:a8:71:f7:77:04:2b:d8:
ce:21:50:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 03:44:42 2025 by rpki-client