Certificate
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer
File: 576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.cer (raw, json)
Hash identifier: 2dh28SejO8TJqyjGcDGifDBYOXW5jSqRZVvp5P3ocT8=
Subject key identifier: 57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Certificate issuer: /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial: 4E442CE3A3ABD5F6F642F2E925AED3F2EA87E067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Manifest: rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft
caRepository: rsync://rki.plasmanodes.com/repo/plasma-casv/1/
Notify URL: https://rki.plasmanodes.com/rrdp/notification.xml
Certificate not before: Tue 23 Sep 2025 03:23:44 +0000
Certificate not after: Tue 22 Sep 2026 03:28:44 +0000
Subordinate resources: IP: 2a14:7583:f800::/40
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:44:2c:e3:a3:ab:d5:f6:f6:42:f2:e9:25:ae:d3:f2:ea:87:e0:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Validity
Not Before: Sep 23 03:23:44 2025 GMT
Not After : Sep 22 03:28:44 2026 GMT
Subject: CN=576B1D30C7D612FE82D2E2C5A78ED4165480F3D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e3:5d:c8:c0:db:dc:92:c3:36:a2:56:ab:bb:
57:5b:07:87:53:d8:8a:ba:ba:c9:0a:81:71:62:30:
94:62:bc:61:62:2f:34:e7:9e:3d:5c:5e:26:ad:e8:
12:06:66:49:98:9f:c9:63:36:71:8d:b3:40:2f:dc:
cd:b0:1e:bb:f6:55:ef:56:8c:ee:97:55:2d:88:00:
12:9d:fe:a5:bb:7f:84:ad:c9:8e:39:27:2e:33:21:
e1:e6:b0:e4:88:56:88:33:22:04:3f:e9:40:64:01:
a5:ad:7d:fe:f0:c9:95:92:5f:2c:2c:5d:cb:24:40:
e9:4b:9e:4a:7e:9f:fb:b9:71:7e:a8:a1:2d:32:18:
f9:77:cb:ae:41:37:92:91:48:63:4c:be:25:52:f0:
7a:7f:22:0c:4a:4f:b1:a6:15:04:df:2f:ae:ae:60:
90:06:94:3c:9d:ce:95:42:29:c0:0a:37:8d:a4:4d:
b5:8b:7d:77:f9:04:cf:91:8a:2d:99:cd:f7:ae:c8:
6c:2c:b0:60:95:99:f4:0d:7b:b4:66:77:b9:d2:c9:
53:78:7a:96:04:c9:39:d9:a4:4d:9c:ed:90:36:fc:
18:02:05:80:3d:a8:d9:66:d4:17:72:d7:32:87:b2:
80:dd:f4:91:da:06:c7:a2:3a:a5:b1:6a:c0:ee:86:
91:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
57:6B:1D:30:C7:D6:12:FE:82:D2:E2:C5:A7:8E:D4:16:54:80:F3:D9
X509v3 Authority Key Identifier:
keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject Information Access:
CA Repository - URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/
RPKI Manifest - URI:rsync://rki.plasmanodes.com/repo/plasma-casv/1/576B1D30C7D612FE82D2E2C5A78ED4165480F3D9.mft
RPKI Notify - URI:https://rki.plasmanodes.com/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7583:f800::/40
Signature Algorithm: sha256WithRSAEncryption
0a:bc:a9:da:59:fa:d3:fe:ab:ec:4b:4d:3f:63:b0:eb:2d:55:
a8:33:d1:c4:04:f3:fb:dc:0b:17:04:f2:22:50:d5:48:c4:35:
a9:7a:c9:2d:54:cf:0d:3d:f6:2c:28:bf:f9:9e:e7:1a:03:f0:
c1:1f:93:3a:d5:f9:bd:56:96:89:fb:13:de:ce:b7:78:76:48:
a0:95:b0:bf:ca:7a:42:b8:f7:37:b3:d6:50:1c:a9:a1:e1:2f:
77:16:fd:9f:40:08:01:51:5a:6a:2f:d5:32:7d:e4:5d:6a:94:
7a:82:cb:d0:1c:40:b0:66:ff:99:a0:34:4b:7d:a9:5c:62:8b:
3c:eb:25:46:5c:60:32:f7:ff:11:4e:72:c4:2c:11:e7:c6:b9:
45:98:b6:0d:d7:36:50:59:80:8e:35:d4:74:76:f0:8d:91:be:
df:05:ad:f0:92:51:67:1f:da:04:4f:02:2f:82:ae:ab:95:9a:
b7:b0:58:4e:91:fa:71:31:dc:2b:40:2c:b8:07:97:be:5c:41:
ee:54:03:12:bc:04:28:99:b4:31:34:6e:2a:7e:7c:8d:40:6a:
53:0c:83:cf:19:8c:75:6a:27:a3:5a:6c:04:63:76:be:d3:4e:
d9:7a:86:79:ef:34:ea:9d:ec:29:1f:31:8d:02:c7:61:93:50:
02:58:fc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:57:47 2025 by rpki-client