Manifest
$ rpki-client -vvvf krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft
File: F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft (raw, json)
Hash identifier: wv0uaDSDEI2jhJr3FOOzOH/6fdXZ/h/Jy4zdDx/Iddc=
Subject key identifier: 3E:44:DB:E7:AB:BA:AD:70:F7:70:6F:B1:9D:9D:52:49:D1:14:97:6E
Authority key identifier: F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA
Certificate issuer: /CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA
Certificate serial: 7FDE53C7E8365159434D8928864F3F9D62C033FA
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer
Subject info access: rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft
Manifest number: E4
Signing time: Fri 02 Oct 2026 12:45:35 +0000
Manifest this update: Fri 02 Oct 2026 12:40:35 +0000
Manifest next update: Sat 03 Oct 2026 15:50:35 +0000
Files and hashes: 1: F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl (hash: mBXiXw1Wbum8flvFQyVsnOEn3ucd8h+D5z6WwarvVls=)
2: 326131333a633863343a373031393a3a2f34382d3438203d3e20323139343138.roa (hash: OcmweSrCgsMNuPf6ZZytHU9NxvCytKfcDUyLD9zAQ1Y=)
3: 326131333a633863343a373031383a3a2f34382d3438203d3e20323139343138.roa (hash: ZyEmmv2NtM1cJBidwRboYBKa7EjRkpw/Hw7NvcYUYx4=)
4: 326131333a633863343a373130303a3a2f34302d3430203d3e20323135313130.roa (hash: cEpZqnCUCXvDnH3pSPMSUOx1tDbxwMrkTLWn8/Sj84U=)
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:de:53:c7:e8:36:51:59:43:4d:89:28:86:4f:3f:9d:62:c0:33:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F55C2745322CEC1805815DCD65BC6AFFD99168DA
Validity
Not Before: Oct 2 12:40:35 2026 GMT
Not After : Oct 3 15:50:35 2026 GMT
Subject: CN=3E44DBE7ABBAAD70F7706FB19D9D5249D114976E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:8f:3c:b7:f9:7a:d7:c3:76:3d:ed:f0:06:
46:64:41:27:bf:26:b9:52:3e:89:7c:97:81:f0:b6:
5e:99:42:ac:32:f5:ae:83:45:ab:22:aa:37:24:33:
c7:5c:70:cd:f2:27:e3:4a:c4:8b:78:67:d6:5f:07:
b5:b6:b9:e0:ce:1e:75:07:8c:5f:b8:b3:1f:8b:6f:
f9:a0:fd:7d:4c:88:1e:a8:6c:16:3d:1a:fb:a5:b3:
38:d8:e4:80:9b:1a:ab:4e:d9:81:dd:1b:1c:ac:83:
dd:f9:97:20:38:f6:4a:ce:45:0c:ec:f7:3e:c1:78:
2e:d5:a5:88:ed:fa:bd:93:e8:a3:0a:25:9a:5d:3d:
d3:53:cd:42:ab:26:4f:e0:cb:17:e7:00:20:6b:f0:
fe:57:5d:db:71:b4:13:bc:d3:fb:e9:2c:67:e5:62:
a7:91:1f:e5:58:39:35:b3:a8:5d:32:1c:2a:b3:ac:
23:97:50:19:c3:27:88:f2:aa:85:73:86:75:01:8b:
ee:a9:33:56:13:cd:52:cf:27:ec:f2:e3:07:92:83:
ba:4e:1f:33:66:db:b0:1a:00:54:00:5c:78:4d:eb:
e1:63:d7:70:56:25:56:d3:6c:cd:57:35:77:71:7c:
0b:e0:64:45:4e:25:2f:38:10:12:22:c5:9f:fa:9a:
22:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:44:DB:E7:AB:BA:AD:70:F7:70:6F:B1:9D:9D:52:49:D1:14:97:6E
X509v3 Authority Key Identifier:
keyid:F5:5C:27:45:32:2C:EC:18:05:81:5D:CD:65:BC:6A:FF:D9:91:68:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/002f8ee6-abe7-4ae8-964c-788bb98c975c/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.cer
Subject Information Access:
Signed Object - URI:rsync://krill.byhill.de/repo/byhill-ca/1/F55C2745322CEC1805815DCD65BC6AFFD99168DA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:7c:c8:eb:ce:5c:cb:f9:ee:cf:10:bb:3c:70:64:6d:55:9c:
50:7e:0d:8f:85:38:36:14:70:95:e0:de:15:24:f3:db:1b:b5:
5d:bd:18:5c:d3:c1:ff:c3:6b:a0:16:67:a9:90:88:84:bb:a4:
7e:10:a5:04:b0:bc:c5:55:c4:36:9b:1b:b6:cf:ca:a7:0a:05:
7d:35:88:58:9c:c3:06:1f:f7:37:8e:ef:6a:a7:d3:d4:87:91:
f6:13:35:31:4a:e0:15:fd:00:90:e1:b5:29:19:f6:bb:d9:42:
7c:ad:47:ca:f0:34:46:85:d2:c2:16:f5:bf:73:f9:a1:5d:73:
4a:d3:94:31:f4:d8:81:2a:0d:62:5a:2a:08:72:9f:d6:50:bd:
72:55:72:44:fa:37:5d:29:0b:77:de:d5:11:97:66:fb:5c:72:
7b:90:45:8d:b7:5e:99:8e:d3:aa:fe:bf:44:a0:7c:21:95:96:
df:1f:41:e4:ba:da:c5:65:67:b5:7e:fc:64:84:c5:ed:ad:d9:
ba:ae:d1:8f:ba:65:8e:79:c8:ee:a9:2d:d5:5d:3e:b8:19:dd:
9e:c9:be:b8:61:9e:df:76:89:7c:dd:7b:b3:95:a9:a6:fd:aa:
37:59:57:22:96:a0:cc:e6:fa:c7:07:90:f8:f0:4b:fb:6e:6d:
6f:11:44:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:02:05 2026 by rpki-client