Fedora 44 native package

rpm-sign

Package signing support

Packages / Fedora 44 / Unspecified / rpm-sign

[Source: rpm]

Package: rpm-sign (6.0.2-1.fc44)

External Resources:

Homepage: [rpm.org]

Similar packages:

[python3-rpm]
Python 3 bindings for apps which will manipulate RPM packages
[rpm]
The RPM package management system
[rpm-apidocs]
API documentation for RPM libraries
[rpm-build]
Scripts and executable programs used to build packages
[rpm-build-libs]
Libraries for building RPM packages
[rpm-cron]
Create daily logs of installed packages.
[rpm-devel]
Development files for manipulating RPM packages
[rpm-libs]
Libraries for manipulating RPM packages
[rpm-plugin-audit]
Rpm plugin for logging audit events on package operations
[rpm-plugin-dbus-announce]
Rpm plugin for announcing transactions on the DBUS
[rpm-plugin-fapolicyd]
Rpm plugin for fapolicyd support
[rpm-plugin-fsverity]
Rpm plugin for fsverity file signatures
[rpm-plugin-ima]
Rpm plugin ima file signatures
[rpm-plugin-prioreset]
Rpm plugin for resetting scriptlet priorities for SysV init
[rpm-plugin-selinux]
Rpm plugin for SELinux functionality
[rpm-plugin-syslog]
Rpm plugin for syslog functionality
[rpm-plugin-systemd-inhibit]
Rpm plugin for systemd inhibit functionality
[rpm-plugin-unshare]
Rpm plugin for Linux namespace isolation functionality
[rpm-sign-libs]
Libraries for signing RPM packages

Package signing support

This package contains support for digitally signing RPM packages.

Other Packages Related to rpm-sign:

dep: ld-linux-aarch64.so.1()(64bit)
Package not available
dep: ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)
Package not available
dep: libpopt.so.0()(64bit)
Package not available
dep: libpopt.so.0(LIBPOPT_0)(64bit)
Package not available
dep: librpm.so.10()(64bit)
Package not available
dep: librpmio.so.10()(64bit)
Package not available
dep: librpmsign.so.10()(64bit)
Package not available
dep: rpm-sign-libs(aarch-64) (= 6.0.2-1.fc44)
Package not available
dep: rtld(GNU_HASH)
Package not available
dep: libc.so.6(GLIBC_2.34)(64bit)
Package not available

Download rpm-sign

Architecture	Package Size	Installed Size	Files
aarch64	20 KiB	71 KiB	[list of files]
x86_64	20 KiB	19 KiB	[list of files]

Package file paths (10)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/bin/rpmsign
/usr/lib/.build-id
/usr/lib/.build-id/23/2c7229583e9ed5daea4d36bbe5c4e4675f1cbc
/usr/lib/.build-id/6f
/usr/lib/.build-id/6f/02fcc195abd75afbcf2adff86f8239fc93362e
/usr/lib/.build-id/72
/usr/lib/.build-id/72/1c1e454e9d8ea372955f62d8fe32b91b62a62e
/usr/lib/.build-id/7c
/usr/lib/.build-id/7c/1fcaac47c44d8aac0af5534277a4c30a8714d3
/usr/share/man/man1/rpmsign.1.gz

Field source: Fedora 44 updates aarch64 revision 44-updates-aarch64:6ecf7f9a3a707e537dd0c542e2f5fabb365c3c76c03b091b23e9c82d7f8ff88b

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Fedora 44 in the browser Build an image that includes rpm-sign

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
6.0.2-1.fc44	44 / updates	aarch64	Fedora 44 · updates · aarch64	20 KiB	71 KiB	Packages/r/rpm-sign-6.0.2-1.fc44.aarch64.rpm
6.0.2-1.fc44	44 / updates	x86_64	Fedora 44 · updates · x86_64	20 KiB	19 KiB	Packages/r/rpm-sign-6.0.2-1.fc44.x86_64.rpm
6.0.1-2.fc44	44 / everything	aarch64	Fedora 44 · Everything · aarch64	22 KiB	71 KiB	Packages/r/rpm-sign-6.0.1-2.fc44.aarch64.rpm
6.0.1-2.fc44	44 / everything	x86_64	Fedora 44 · Everything · x86_64	22 KiB	19 KiB	Packages/r/rpm-sign-6.0.1-2.fc44.x86_64.rpm

Field source: Fedora 44 updates aarch64 revision 44-updates-aarch64:6ecf7f9a3a707e537dd0c542e2f5fabb365c3c76c03b091b23e9c82d7f8ff88b

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

6.0.2-1.fc44 / aarch64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 95c350d38b85adbb7cebaa1e5839668b01b6c5ecf2dc7242228d2f23df5d4b50

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' '95c350d38b85adbb7cebaa1e5839668b01b6c5ecf2dc7242228d2f23df5d4b50' 'rpm-sign-6.0.2-1.fc44.aarch64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 44 updates aarch64 revision 44-updates-aarch64:6ecf7f9a3a707e537dd0c542e2f5fabb365c3c76c03b091b23e9c82d7f8ff88b

6.0.2-1.fc44 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 65bdd990a6c27fa651244421c8aa7859586f6827a87bdaaeda24186070b4fcd5

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' '65bdd990a6c27fa651244421c8aa7859586f6827a87bdaaeda24186070b4fcd5' 'rpm-sign-6.0.2-1.fc44.x86_64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 44 updates x86_64 revision 44-updates-x86_64:ffcac72d41afd8a62019714dd668a27f333f8ac19678580178b5b67c23ca6419

6.0.1-2.fc44 / aarch64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: f66cee44b3fece11d60258a7c14c24f23e324063f692a0d30de35629aed7dc97

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' 'f66cee44b3fece11d60258a7c14c24f23e324063f692a0d30de35629aed7dc97' 'rpm-sign-6.0.1-2.fc44.aarch64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 44 Everything aarch64 revision 44-everything-aarch64:ad124f8125666e9059d7a8180427bdaea80f6286f71140457e5c7edd95883eee

6.0.1-2.fc44 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 62e20a7dc100e00443eb78e094d3b630f5f6ffbfdd5774a8cf5bf1780544298f

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' '62e20a7dc100e00443eb78e094d3b630f5f6ffbfdd5774a8cf5bf1780544298f' 'rpm-sign-6.0.1-2.fc44.x86_64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 44 Everything x86_64 revision 44-everything-x86_64:da3845427d188097f6fd71b417a039bdfb8efefc4f38ca44b5cbb94f95a18991

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description: 25/25
Artifact path and source digest: 25/25
Dependency metadata: 15/15
Package-file index: 15/15
Homepage: 5/5
License text: 5/5
Source package or maintainer: 10/10

Recorded total: 100/100

Field source: Fedora 44 Everything aarch64 revision 44-everything-aarch64:ad124f8125666e9059d7a8180427bdaea80f6286f71140457e5c7edd95883eee, Fedora 44 Everything x86_64 revision 44-everything-x86_64:da3845427d188097f6fd71b417a039bdfb8efefc4f38ca44b5cbb94f95a18991, Fedora 44 updates aarch64 revision 44-updates-aarch64:6ecf7f9a3a707e537dd0c542e2f5fabb365c3c76c03b091b23e9c82d7f8ff88b, Fedora 44 updates x86_64 revision 44-updates-x86_64:ffcac72d41afd8a62019714dd668a27f333f8ac19678580178b5b67c23ca6419. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

Fedora 44 Everything aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 44-everything-aarch64:ad124f8125666e9059d7a8180427bdaea80f6286f71140457e5c7edd95883eee
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-44&arch=aarch64
Signed-object SHA-256
236514c32119ab3c85b81fbb9e5e9d92b07aeba0d19d64c9b4fc9117a1863769
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-44-primary
SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified
Fedora 44 Everything x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 44-everything-x86_64:da3845427d188097f6fd71b417a039bdfb8efefc4f38ca44b5cbb94f95a18991
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-44&arch=x86_64
Signed-object SHA-256
1300b99ac5d04b5561ad901320c8bd59ed1553f4971c3ce2ca48c40242c66676
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-44-primary
SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified
Fedora 44 updates aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 44-updates-aarch64:6ecf7f9a3a707e537dd0c542e2f5fabb365c3c76c03b091b23e9c82d7f8ff88b
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=updates-released-f44&arch=aarch64
Signed-object SHA-256
2ec0ba92e556309075d8efe3c3301b36bb7ecd47c4e17566f0192c9c5436ed5f
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-44-primary
SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified
Fedora 44 updates x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 44-updates-x86_64:ffcac72d41afd8a62019714dd668a27f333f8ac19678580178b5b67c23ca6419
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=updates-released-f44&arch=x86_64
Signed-object SHA-256
a69a0ab020457a7af2515066b7caccb3950bcf9dc7bedb52b1850098d9857ae1
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-44-primary
SHA-256 93642aec521a1e5e96dd715f7ae0ec0850ebc9de09a94ce03cae5263f26cc18a
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified