openSUSE Tumbleweed native package

openSUSE-build-key

The public gpg keys for rpm package signature verification

Packages / openSUSE Tumbleweed / System/Packages / openSUSE-build-key

[Source: openSUSE-build-key]

Package: openSUSE-build-key (1.0-68.1)

[Project overview: openSUSE-build-key]

External Resources:

Homepage: [en.opensuse.org]

The public gpg keys for rpm package signature verification

This package contains the gpg keys that are used to sign the openSUSE rpm packages. The keys installed here are not actually used by anything. rpm/zypper use the keys in the rpm db instead.

Other Packages Related to openSUSE-build-key:

dep: /bin/sh
Package not available
dep: /bin/sh
Package not available

Download openSUSE-build-key

Architecture	Package Size	Installed Size	Files
x86_64	44 KiB	38 KiB	[list of files]

Package file paths (26)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/lib/rpm/gnupg
/usr/lib/rpm/gnupg/keys
/usr/lib/rpm/gnupg/keys/gpg-pubkey-09d9ea69-68595a8c.asc
/usr/lib/rpm/gnupg/keys/gpg-pubkey-287a0027-682477e3.asc
/usr/lib/rpm/gnupg/keys/gpg-pubkey-29b700a4-6a17fa38.asc
/usr/lib/rpm/gnupg/keys/gpg-pubkey-39db7c82-66c5d91a.asc
/usr/lib/rpm/gnupg/keys/gpg-pubkey-3fa1d6ce-67c856ee.asc
/usr/lib/rpm/pqkeys
/usr/lib/rpm/pqkeys/opensuse-mldsa-key.pem
/usr/lib/systemd/system/openSUSE-build-key-import.service
/usr/lib/systemd/system/openSUSE-build-key-import.timer
/usr/sbin/import-openSUSE-build-key
/usr/share/container-keys
/usr/share/container-keys/opensuse-container-key-2023.asc
/usr/share/container-keys/opensuse-container-key.asc
/usr/share/container-keys/suse-container-key.asc
/usr/share/container-keys/suse-container-key-old.asc
/usr/share/doc/packages/openSUSE-build-key
/usr/share/doc/packages/openSUSE-build-key/security_at_suse_de.asc
/usr/share/pki
/usr/share/pki/containers
/usr/share/pki/containers/opensuse-container-key-2023.pem
/usr/share/pki/containers/suse-container-key-old.pem
/usr/share/pki/containers/suse-container-key.pem
/var/lib/openSUSE-build-key
/var/lib/openSUSE-build-key/imported

Field source: openSUSE Tumbleweed OSS revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try openSUSE Tumbleweed in the browser Build an image that includes openSUSE-build-key

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
1.0-68.1	tumbleweed / oss	x86_64	openSUSE Tumbleweed · OSS · multi-architecture	44 KiB	38 KiB	x86_64/openSUSE-build-key-1.0-68.1.x86_64.rpm

Field source: openSUSE Tumbleweed OSS revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

1.0-68.1 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha512: bd7355d4aedf7e8ae90347d5dcb7adddc86acddab26132edf5bdf6ee084c09d1c48716a7d3aa1b0010f07dda6cc97f6090fc896667ae7d688c6f5532ae38e931

Field source: openSUSE Tumbleweed OSS revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description: 25/25
Artifact path and source digest: 25/25
Dependency metadata: 15/15
Package-file index: 15/15
Homepage: 5/5
License text: 5/5
Source package or maintainer: 10/10

Recorded total: 100/100

Field source: openSUSE Tumbleweed OSS revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

openSUSE Tumbleweed OSSSep 1, 2026
Authoritative source; repository metadata signature verified, revision tumbleweed-oss-multiarch:4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://download.opensuse.org/tumbleweed/repo/oss/repodata/repomd.xml
Signed-object SHA-256
4db10cdde3ad82c7e22be35753c9e164b4bdd30f92db4aee17a0d4c94c5f902f
Signer fingerprint
AD485664E901B867051AB15F35A2F86E29B700A4
Keyring revision
opensuse-project-signing-key.asc
SHA-256 b5745739ebfb95b25b8e810f9bcb847fe750ccda598bd85f02f0e974599a6d7e
Tool and policy
gpgv (GnuPG) 2.4.9
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified