ASiC-E, the Associated Signature Container Extended, is a ZIP file that holds one or more documents together with electronic signatures over them. ETSI defines it in EN 319 162-1. Signatures sit in META-INF as XAdES XML files or CAdES .p7s files, and a manifest can say which files each signature covers. A valid signature does not prove the invoice inside is correct. Klarbon support is planned, not available yet.
What is in an ASiC-E container?
| Part | Holds |
|---|---|
mimetype |
application/vnd.etsi.asic-e+zip, first in the ZIP when present |
| Signed files | the documents, such as an invoice and its attachments |
META-INF/*signatures*.xml |
XAdES signatures |
META-INF/*signature*.p7s |
CAdES signatures, with an ASiC manifest |
META-INF/*ASiCManifest*.xml |
the list of files a CAdES signature or time stamp covers |
META-INF/*timestamp*.tst |
time stamp tokens |
| Property | Value |
|---|---|
| Container | ZIP |
| Standard | ETSI EN 319 162-1 V1.1.1, April 2016 |
| Signatures | XAdES or CAdES |
| Extension | .asice, or .sce |
| Simple form | ASiC-S, one file, extension .asics |
ETSI publishes the standard free of charge (EN 319 162-1).
ASiC-E, P7M or ZIP?
| ASiC-E | P7M | ZIP | |
|---|---|---|---|
| Files | one or more | one, inside the signature | several |
| Signature | XAdES or CAdES, in META-INF | CAdES, wrapping the file | none |
| Integrity evidence | requires signature validation | requires signature validation | no signature required by ZIP itself |
What does Klarbon do with ASiC-E?
Klarbon does not open ASiC-E containers today; listing the files, showing the invoice and reporting the signature are planned, not available yet. Klarbon does not create signatures or judge whether a certificate is qualified. To read an invoice taken out of a container, use the invoice viewer.
Related
Frequently asked questions
What is ASiC-E?
The Associated Signature Container Extended, a ZIP file that holds one or more documents together with electronic signatures over them. ETSI defines it in EN 319 162-1. The signatures are XAdES or CAdES.
What is the difference between ASiC-E and ASiC-S?
ASiC-S, the simple form, associates one data file with one signature file or one time-assertion file. A signature file can contain multiple signatures. ASiC-E, the extended form, ties one or more files to one or more signatures, and a manifest can say which files each one covers.
Which file extension does ASiC-E use?
.asice, or .sce where a system allows only three characters. When present, the mimetype file in the container holds application/vnd.etsi.asic-e+zip.
Does a valid ASiC-E signature mean the invoice is correct?
No. A successful signature-integrity check shows that the signed content has not changed. Trust in the signer and whether the invoice follows its rules are separate checks; the container alone does not establish a qualified signature.