Package: cargo (1.85.0+dfsg3-1) gestore di pacchetti Rust Other Packages Related to cargo: dep: [libc6 ] (>= 2.39)
GNU C Library: Shared libraries
dep: [libcurl4t64 ] (>= 7.28.0)
libreria di trasferimento URL lato client facile da usare (variante OpenSSL)
dep: [libgcc-s1 ] (>= 4.2)
GCC support library
dep: [libgit2-1.9 ] (>= 1.9.0)
libreria Git di basso livello
dep: [libsqlite3-0 ] (>= 3.5.9)
SQLite 3 shared library
dep: [libssh2-1t64 ] (>= 1.2.5)
libreria client SSH2
dep: [libssl3t64 ] (>= 3.0.0)
toolkit Secure Sockets Layer - librerie condivise
dep: [zlib1g ] (>= 1:1.2.3.4)
compression library - runtime
dep: [rustc ] (= 1.85.0+dfsg3-1)
Linguaggio di programmazione di sistema Rust
dep: [binutils ]
GNU assembler, linker and binary utilities
dep: [gcc ]
GNU C compiler
dep: [clang ]
C, C++ and Objective-C compiler (LLVM based), clang binary
dep: c-compiler
Package not available
sug: [cargo-doc ]
Gestore di pacchetti Rust, documentazione
sug: [python3 ]
interactive high-level object-oriented language (default python3 version)
Percorsi file del pacchetto (49) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/bin/cargo /usr/share/bash-completion/completions/cargo /usr/share/cargo/bin/cargo /usr/share/cargo/scripts/audit-vendor-source /usr/share/cargo/scripts/build-wit-bindgen.sh /usr/share/cargo/scripts/debian-cargo-vendor /usr/share/cargo/scripts/guess-crate-copyright /usr/share/cargo/scripts/prune-checksums /usr/share/cargo/scripts/repack-orig-tarball.sh /usr/share/doc/cargo/changelog.Debian.gz /usr/share/doc/cargo/changelog.gz /usr/share/doc/cargo/copyright /usr/share/man/man1/cargo.1.gz /usr/share/man/man1/cargo-add.1.gz /usr/share/man/man1/cargo-bench.1.gz /usr/share/man/man1/cargo-build.1.gz /usr/share/man/man1/cargo-check.1.gz /usr/share/man/man1/cargo-clean.1.gz /usr/share/man/man1/cargo-doc.1.gz /usr/share/man/man1/cargo-fetch.1.gz /usr/share/man/man1/cargo-fix.1.gz /usr/share/man/man1/cargo-generate-lockfile.1.gz /usr/share/man/man1/cargo-help.1.gz /usr/share/man/man1/cargo-info.1.gz /usr/share/man/man1/cargo-init.1.gz /usr/share/man/man1/cargo-install.1.gz /usr/share/man/man1/cargo-locate-project.1.gz /usr/share/man/man1/cargo-login.1.gz /usr/share/man/man1/cargo-logout.1.gz /usr/share/man/man1/cargo-metadata.1.gz /usr/share/man/man1/cargo-new.1.gz /usr/share/man/man1/cargo-owner.1.gz /usr/share/man/man1/cargo-package.1.gz /usr/share/man/man1/cargo-pkgid.1.gz /usr/share/man/man1/cargo-publish.1.gz /usr/share/man/man1/cargo-remove.1.gz /usr/share/man/man1/cargo-report.1.gz /usr/share/man/man1/cargo-run.1.gz /usr/share/man/man1/cargo-rustc.1.gz /usr/share/man/man1/cargo-rustdoc.1.gz /usr/share/man/man1/cargo-search.1.gz /usr/share/man/man1/cargo-test.1.gz /usr/share/man/man1/cargo-tree.1.gz /usr/share/man/man1/cargo-uninstall.1.gz /usr/share/man/man1/cargo-update.1.gz /usr/share/man/man1/cargo-vendor.1.gz /usr/share/man/man1/cargo-version.1.gz /usr/share/man/man1/cargo-yank.1.gz /usr/share/zsh/vendor-completions/_cargo Field source: Debian 13 (Trixie) main amd64 revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Usa questo pacchetto OpenFactory può avviare questo sistema operativo in una macchina virtuale del browser, o iniziare una costruzione che include il nome nativo del pacchetto di questo record.
Versioni, suite e repository Ogni riga è metadato dell'indice pacchetti per una versione, architettura, suite e repository. Nomi, URL e dimensioni arrivano dalla fonte; un link è un punto di recupero mutabile, non una redistribuzione OpenFactory.
Checksum e date di osservazione For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.
1.85.0+dfsg3-1 / amd64 Observed Sep 1, 2026 to Sep 1, 2026
Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported sha256: 04515b777d20b2480e48257e2252e9406aec858c819470ca5442a5de77331d06
After downloading that exact artifact, compare its bytes with the source-reported expected digest:
printf '%s %s\n' '04515b777d20b2480e48257e2252e9406aec858c819470ca5442a5de77331d06' 'cargo_1.85.0+dfsg3-1_amd64.deb' | sha256sum --check --strict -A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.
Field source: Debian 13 (Trixie) main amd64 revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
1.85.0+dfsg3-1 / arm64 Observed Sep 1, 2026 to Sep 1, 2026
Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported sha256: d711aca80040e0145cff6e7d97c31e2052103f4c3f5cad5d52abfb392785e27f
After downloading that exact artifact, compare its bytes with the source-reported expected digest:
printf '%s %s\n' 'd711aca80040e0145cff6e7d97c31e2052103f4c3f5cad5d52abfb392785e27f' 'cargo_1.85.0+dfsg3-1_arm64.deb' | sha256sum --check --strict -A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.
Field source: Debian 13 (Trixie) main arm64 revision trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
1.94.1+dfsg1-1~bpo13+3 / amd64 Observed Sep 1, 2026 to Sep 1, 2026
Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported sha256: 9e034d9ceca9652723d4eba900361e733d06faa9da81d84027f85f73803cce37
After downloading that exact artifact, compare its bytes with the source-reported expected digest:
printf '%s %s\n' '9e034d9ceca9652723d4eba900361e733d06faa9da81d84027f85f73803cce37' 'cargo_1.94.1+dfsg1-1~bpo13+3_amd64.deb' | sha256sum --check --strict -A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.
Field source: Debian 13 (Trixie) backports main amd64 revision trixie-backports-main-amd64:d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
1.94.1+dfsg1-1~bpo13+3 / arm64 Observed Sep 1, 2026 to Sep 1, 2026
Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported sha256: 38c8c10edbcf4210d0b0abaaee81ca8fc83148cc500e12c5ca7476a6cdee061c
After downloading that exact artifact, compare its bytes with the source-reported expected digest:
printf '%s %s\n' '38c8c10edbcf4210d0b0abaaee81ca8fc83148cc500e12c5ca7476a6cdee061c' 'cargo_1.94.1+dfsg1-1~bpo13+3_arm64.deb' | sha256sum --check --strict -A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.
Field source: Debian 13 (Trixie) backports main arm64 revision trixie-backports-main-arm64:acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
Fonti e provenienza Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.
Authoritative source; repository metadata signature verified, revision trixie-backports-main-amd64:d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed-object SHA-256 d76b03d2e95d41787657f3526c331993526b4b17f6cc09094b0675bcbf57dc7c
Signer fingerprint 4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision debian-archive-keyring.gpgSHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy gpgv (GnuPG) 2.4.9 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Signed Release → package-index hash linkage Path: main/binary-amd64/Packages.xz Expected SHA-256: d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b Observed SHA-256: d39821bb4fc48252327fb05d82ee36a9b8a1446ae693561c7389741ccb0a2c7b Result: match verified
Authoritative source; repository metadata signature verified, revision trixie-backports-main-arm64:acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed-object SHA-256 d76b03d2e95d41787657f3526c331993526b4b17f6cc09094b0675bcbf57dc7c
Signer fingerprint 4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision debian-archive-keyring.gpgSHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy gpgv (GnuPG) 2.4.9 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Signed Release → package-index hash linkage Path: main/binary-arm64/Packages.xz Expected SHA-256: acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357 Observed SHA-256: acf4939d14c5d5ed995554b7d34e1431dd020622de39cce80c0a28de73e15357 Result: match verified
Authoritative source; repository metadata signature verified, revision trixie-main-amd64:3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed-object SHA-256 98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint 4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision debian-archive-keyring.gpgSHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy gpgv (GnuPG) 2.4.9 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Signed Release → package-index hash linkage Path: main/binary-amd64/Packages.xz Expected SHA-256: 3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3 Observed SHA-256: 3ab4e811cf4f3e5a335d382c58cc19d85f1abe7a4ef4689160ca1f637fa0e9b3 Result: match verified
Authoritative source; repository metadata signature verified, revision trixie-main-arm64:753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed-object SHA-256 98b25b5cd185c59d34aa6e4c3e9b5b8f01bbe9d104fe2dcfbcd30dc0a14a59ed
Signer fingerprint 4CB50190207B4758A3F73A796ED0E7B82643E131
Keyring revision debian-archive-keyring.gpgSHA-256 506b815cbb32d9b6066b4a2aa524071e071761e7e7f68c3ac74f3061ba852017
Tool and policy gpgv (GnuPG) 2.4.9 openfactory-software-catalog-signature-v1
Verification time Sep 1, 2026 Signed Release → package-index hash linkage Path: main/binary-arm64/Packages.xz Expected SHA-256: 753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908 Observed SHA-256: 753da751bbc7a679f48bd1b623ffd4479cb6861c426118284c76eb82909e4908 Result: match verified