Manifests for the Resource Public Key Infrastructure (RPKI)

Metadata

Publisher: IETF
Doc Type: Standard
Pages: 16
Abstract: This document defines a "manifest" for use in the Resource Public Key Infrastructure (RPKI). A manifest is a signed object (file) that contains a listing of all the signed objects (files) in the repository publication point (directory) associated with an authority responsible for publishing in the repository. For each certificate, Certificate Revocation List (CRL), or other type of signed objects issued by the authority that are published at this repository publication point, the manifest contains both the name of the file containing the object and a hash of the file content. Manifests are intended to enable a relying party (RP) to detect certain forms of attacks against a repository. Specifically, if an RP checks a manifest's contents against the signed objects retrieved from a repository publication point, then the RP can detect replay attacks, and unauthorized in-flight modification or deletion of signed objects. This document obsoletes RFC 6486.
Publication Date: 2022-06-01
Status Note: Proposed Standard
DOI: 10.17487/RFC9286
Link: https://doi.org/10.17487/RFC9286
Author(s): Rob Austein
Geoff Huston
Stephen Kent
Matt Lepinski

Latest version of IETF RFC 9286

Document Versions — IETF RFC 9286

▶ IETF RFC 9286 (2022-06-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IANA, "RPKI Repository Name Schemes", <https://www.iana.org/assignments/rpki/>. EXTERNAL
IETF RFC 2119 [Active*]
IETF RFC 5280 [Active, Amended*]
IETF RFC 6481 [Active*]
IETF RFC 6482 [Superseded*]
IETF RFC 6487 [Active*]
IETF RFC 6488 [Active*]
IETF RFC 7935 [Active*]
IETF RFC 8174 [Active*]
T-REC-X.690.2021 — X690 EXTERNAL

Bibliographic Reference(s)

IETF RFC 3779 [Active*]
IETF RFC 5652 [Active*]
IETF RFC 6480 [Active*]
IETF RFC 6486 [Superseded*]
IETF RFC 6489 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC9286.json

Supersedes:

IETF RFC 6486 [Superseded*]

Amended by:

RFC9981 NOT IN REGISTRY

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 9286, Manifests for the Resource Public Key Infrastructure (RPKI). Available at https://doi.org/10.17487/RFC9286

Snippet:

IETF RFC 9286, Manifests for the Resource Public Key Infrastructure (RPKI). Available at https://doi.org/10.17487/RFC9286

HTML (ISO 690 compliant)

Preview:

IETF RFC 9286, Manifests for the Resource Public Key Infrastructure (RPKI). Available at https://doi.org/10.17487/RFC9286

Snippet:

<span class="citation"><cite>IETF RFC 9286</cite>, Manifests for the Resource Public Key Infrastructure (RPKI). Available at <a href="https://doi.org/10.17487/RFC9286" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9286</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 9286, Manifests for the Resource Public Key Infrastructure (RPKI)
doi: 10.17487/RFC9286
url: https://doi.org/10.17487/RFC9286

Snippet:

<li>
<cite id="bib-rfc9286">IETF RFC 9286</cite>, Manifests for the Resource Public Key Infrastructure (RPKI)
<span class="doi">10.17487/RFC9286</span>
</li>

Referenced By

IETF RFC 9829 [Active*]