On the Use of the Cryptographic Message Syntax (CMS) Signing-Time Attribute in Resource Public Key Infrastructure (RPKI) Signed Objects
Metadata
- Publisher
- IETF
- Doc Type
- Standard
- Pages
- 9
- Abstract
- In the Resource Public Key Infrastructure (RPKI), Signed Objects are defined as Cryptographic Message Syntax (CMS) protected content types. A Signed Object contains a signing-time attribute, representing the purported time at which the object was signed by its issuer. RPKI repositories are accessible using the rsync and RPKI Repository Delta protocols, allowing Relying Parties (RPs) to synchronize a local copy of the RPKI repository used for validation with the remote repositories. This document describes how the CMS signing-time attribute can be used to avoid needless retransfers of data when switching between different synchronization protocols. This document updates RFC 6488 by mandating the presence of the CMS signing-time attribute and disallowing the use of the binary-signing-time attribute.
- Publication Date
- 2024-05-01
- Status Note
- Proposed Standard
- DOI
10.17487/RFC9589- Link
- https://doi.org/10.17487/RFC9589
- Author(s)
- Job SnijdersTom Harrison
- Keyword(s)
- CMS
Latest version of IETF RFC 9589
Document Versions — IETF RFC 9589
-
▶ IETF RFC 9589 (2024-05-01)THIS DOC [ACTIVE] [LATEST VERSION]
Normative Reference(s)
- "openrsync", 2023, <https://www.openrsync.org/>. EXTERNAL
- "rsync", 2024, <https://rsync.samba.org/>. EXTERNAL
- IETF RFC 2119 [Active*]
- IETF RFC 5652 [Active*]
- IETF RFC 6268 [Active*]
- IETF RFC 6480 [Active*]
- IETF RFC 6481 [Active*]
- IETF RFC 6488 [Active*]
- IETF RFC 8174 [Active*]
- IETF RFC 8182 [Active*]
Bibliographic Reference(s)
Source Data (JSON)
Full registry record with provenance metadata. Open directly: /api/doc/RFC9589.json
Amends:
IETF RFC 6488 [Active*]
Reference Tree
Explore all references and references to this document, as a navigable tree.
Open Reference TreeReference this Doc
Plain text (ISO 690 compliant)
Preview:
IETF RFC 9589, On the Use of the Cryptographic Message Syntax (CMS) Signing-Time Attribute in Resource Public Key Infrastructure (RPKI) Signed Objects. Available at https://doi.org/10.17487/RFC9589
Snippet:
IETF RFC 9589, On the Use of the Cryptographic Message Syntax (CMS) Signing-Time Attribute in Resource Public Key Infrastructure (RPKI) Signed Objects. Available at https://doi.org/10.17487/RFC9589
HTML (ISO 690 compliant)
Preview:
IETF RFC 9589, On the Use of the Cryptographic Message Syntax (CMS) Signing-Time Attribute in Resource Public Key Infrastructure (RPKI) Signed Objects. Available at https://doi.org/10.17487/RFC9589
Snippet:
<span class="citation"><cite>IETF RFC 9589</cite>, On the Use of the Cryptographic Message Syntax (CMS) Signing-Time Attribute in Resource Public Key Infrastructure (RPKI) Signed Objects. Available at <a href="https://doi.org/10.17487/RFC9589" target="_blank" rel="noopener">https://doi.org/10.17487/RFC9589</a></span>
SMPTE's HTML Pub
Preview:
IETF RFC 9589, On the Use of the Cryptographic Message Syntax (CMS) Signing-Time Attribute in Resource Public Key Infrastructure (RPKI) Signed Objects
doi: 10.17487/RFC9589
url: https://doi.org/10.17487/RFC9589
doi: 10.17487/RFC9589
url: https://doi.org/10.17487/RFC9589
Snippet:
<li> <cite id="bib-rfc9589">IETF RFC 9589</cite>, On the Use of the Cryptographic Message Syntax (CMS) Signing-Time Attribute in Resource Public Key Infrastructure (RPKI) Signed Objects <span class="doi">10.17487/RFC9589</span> </li>