Manifest
$ rpki-client -vvvf rpki.vexshield.eu/repo/vexshield/0/25DD0D9763FD6B0D07F6BCC40E27D373B9A4B828.mft
File: 25DD0D9763FD6B0D07F6BCC40E27D373B9A4B828.mft (raw, json)
Hash identifier: k/uA5cz+kBqV2u3XXBhgnUsCCZAXUCviWkSoCWj7+mM=
Subject key identifier: 1F:9E:0B:A9:6C:C9:C0:FB:4A:3F:03:87:B8:C8:B4:22:4C:1C:0D:72
Authority key identifier: 25:DD:0D:97:63:FD:6B:0D:07:F6:BC:C4:0E:27:D3:73:B9:A4:B8:28
Certificate issuer: /CN=25dd0d9763fd6b0d07f6bcc40e27d373b9a4b828
Certificate serial: 3E28EEE85E103F04FBEA0F6092FA1316A759F75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jd0Nl2P9aw0H9rzEDifTc7mkuCg.cer
Subject info access: rsync://rpki.vexshield.eu/repo/vexshield/0/25DD0D9763FD6B0D07F6BCC40E27D373B9A4B828.mft
Manifest number: 1D
Signing time: Sat 14 Nov 2026 13:02:01 +0000
Manifest this update: Sat 14 Nov 2026 12:56:58 +0000
Manifest next update: Sun 15 Nov 2026 16:31:58 +0000
Files and hashes: 1: 25DD0D9763FD6B0D07F6BCC40E27D373B9A4B828.crl (hash: /lpLXgphEC6wgdmi4R0nMn4Ppl+KQkKu71/8Karu5yc=)
2: AS201028.asa (hash: 5il6LHybFB4zbvkSetqIq+D52CKqN7sCM9gE+yDmkvE=)
Validation: OK
Signature path: rsync://rpki.vexshield.eu/repo/vexshield/0/25DD0D9763FD6B0D07F6BCC40E27D373B9A4B828.crl
rsync://rpki.vexshield.eu/repo/vexshield/0/25DD0D9763FD6B0D07F6BCC40E27D373B9A4B828.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jd0Nl2P9aw0H9rzEDifTc7mkuCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:28:ee:e8:5e:10:3f:04:fb:ea:0f:60:92:fa:13:16:a7:59:f7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25dd0d9763fd6b0d07f6bcc40e27d373b9a4b828
Validity
Not Before: Nov 14 12:56:58 2026 GMT
Not After : Nov 15 16:31:58 2026 GMT
Subject: CN=1F9E0BA96CC9C0FB4A3F0387B8C8B4224C1C0D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:94:5b:6b:2c:67:6c:46:6e:78:d9:b7:76:b8:
65:88:15:85:4f:67:b0:01:91:23:6d:61:92:c0:0f:
3d:3e:49:bc:7e:8b:eb:b5:4a:19:e0:6f:e5:48:47:
2d:b4:0b:9c:17:fa:3a:59:30:bb:cc:85:59:d9:1f:
c4:68:f4:fa:57:0e:d1:30:0a:1a:89:e1:ea:1f:ee:
74:bc:ca:ad:3a:f4:5b:54:e5:11:48:c9:9e:bc:8b:
d1:74:33:96:df:bc:81:f8:ef:49:77:c7:d0:46:24:
99:10:53:f0:68:e6:5c:24:f5:da:83:d1:59:ac:e6:
b1:a6:c3:fb:dd:2a:6a:21:ac:f7:73:a2:22:96:c2:
de:3b:75:08:6e:70:47:67:51:b1:a8:7f:73:89:f4:
78:25:bf:10:53:cf:f4:cd:ad:23:a5:7a:2e:4b:95:
84:d5:ef:c7:19:37:c7:6d:25:11:50:fe:30:f5:78:
42:f5:d2:45:e5:64:79:44:2c:15:9d:eb:93:23:94:
01:2a:6d:23:72:d9:53:9f:fa:82:87:f2:ba:70:96:
27:4d:4d:44:1b:6c:12:aa:16:6d:bb:46:87:a5:95:
02:fd:05:68:62:fd:1c:aa:82:ba:e6:bd:d3:53:fa:
2f:da:95:92:d8:97:2f:2e:72:7d:ce:b5:c7:f7:e1:
6a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9E:0B:A9:6C:C9:C0:FB:4A:3F:03:87:B8:C8:B4:22:4C:1C:0D:72
X509v3 Authority Key Identifier:
keyid:25:DD:0D:97:63:FD:6B:0D:07:F6:BC:C4:0E:27:D3:73:B9:A4:B8:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.vexshield.eu/repo/vexshield/0/25DD0D9763FD6B0D07F6BCC40E27D373B9A4B828.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jd0Nl2P9aw0H9rzEDifTc7mkuCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.vexshield.eu/repo/vexshield/0/25DD0D9763FD6B0D07F6BCC40E27D373B9A4B828.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:83:7d:af:2e:2e:45:e3:bc:80:20:f3:27:24:37:82:c6:d8:
d6:65:2c:da:fa:b6:6d:14:65:87:a7:95:2a:aa:2c:9d:2e:3c:
53:44:e6:06:8d:a2:d2:0c:9d:ae:84:22:77:85:fe:f0:bf:68:
75:34:65:9c:c6:bc:4d:e4:3d:6a:44:39:c7:5e:80:f0:41:62:
27:4b:44:9e:30:f1:45:c0:7f:2f:3a:a4:2b:58:88:f3:b3:1f:
36:21:11:cb:84:b1:d8:39:f1:af:89:08:c5:26:56:ee:54:af:
28:a4:41:d0:da:36:55:da:0d:ab:93:d5:15:ca:12:5a:54:17:
f2:41:d9:78:46:f8:ce:16:ea:98:12:c8:b3:4d:63:7b:af:17:
7b:94:50:56:b4:d6:9e:55:fc:fd:2d:9f:22:16:30:c6:d9:ef:
28:af:fa:d8:dd:20:a1:ab:20:1f:98:65:ac:ef:86:98:8c:eb:
f8:fc:66:54:01:6c:21:f8:71:34:90:2c:02:aa:62:e7:a1:5f:
fe:ee:f8:29:55:f2:be:fe:79:95:b0:62:5d:f9:36:5a:27:e6:
83:35:cf:6f:43:57:7b:38:b3:ef:7e:d7:d3:16:0b:dd:5d:5d:
a9:14:f5:12:96:f8:05:08:b3:da:75:3f:e8:6c:ff:ac:e4:10:
f8:a2:0b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:37:17 2026 by rpki-client