Linux workstation

Fedora 43 native package

rpminspect

Build deviation analysis and compliance tool

Packages / Fedora 43 / Development/Tools / rpminspect

[Source: rpminspect]

Package: rpminspect (2.1-1.fc43)

External Resources:

Homepage: [github.com]

Similar packages:

Build deviation analysis and compliance tool

Build deviation and compliance tool. This program runs a number of tests against one or two builds of source RPM files. The built artifacts are inspected and compared to report changes and validate policy compliance against the defined parameters.

Other Packages Related to rpminspect:

  • dep: ld-linux-aarch64.so.1()(64bit)

    Package not available

  • dep: ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)

    Package not available

  • dep: librpm.so.10()(64bit)

    Package not available

  • dep: librpminspect(aarch-64) (= 2.1-1.fc43)

    Package not available

  • dep: librpminspect.so.0()(64bit)

    Package not available

  • dep: librpmio.so.10()(64bit)

    Package not available

  • dep: rtld(GNU_HASH)

    Package not available

  • dep: libc.so.6(GLIBC_2.34)(64bit)

    Package not available

Download rpminspect

ArchitecturePackage SizeInstalled SizeFiles
aarch64122 KiB465 KiB[list of files]
x86_64123 KiB434 KiB[list of files]

Package file paths (25)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

  • /usr/bin/rpminspect
  • /usr/lib/.build-id
  • /usr/lib/.build-id/3b
  • /usr/lib/.build-id/3b/26a3546c6a044261b5a7baeb053e88be612bc7
  • /usr/lib/.build-id/6c
  • /usr/lib/.build-id/6c/91dd276beb1dd1e613c6a2823b6d95d87f050c
  • /usr/lib/.build-id/c8
  • /usr/lib/.build-id/c8/9e5acdb0351ba04f3ef519e24e65e30c38180b
  • /usr/lib/.build-id/e8
  • /usr/lib/.build-id/e8/5db3cfc038601c1c3e2b6d466a3a18601279f6
  • /usr/share/doc/rpminspect
  • /usr/share/doc/rpminspect/AUTHORS.md
  • /usr/share/doc/rpminspect/CHANGES.md
  • /usr/share/doc/rpminspect/libtoml/README.md
  • /usr/share/doc/rpminspect/libtoml/README.rpminspect
  • /usr/share/doc/rpminspect/libxdiff/AUTHORS
  • /usr/share/doc/rpminspect/libxdiff/README
  • /usr/share/doc/rpminspect/README.md
  • /usr/share/doc/rpminspect/TODO
  • /usr/share/licenses/rpminspect
  • /usr/share/licenses/rpminspect/COPYING
  • /usr/share/licenses/rpminspect/libtoml/LICENSE
  • /usr/share/licenses/rpminspect/libxdiff/COPYING
  • /usr/share/locale/ru_RU/LC_MESSAGES/rpminspect.mo
  • /usr/share/man/man1/rpminspect.1.gz

Field source: Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Fedora 43 in the browserBuild an image that includes rpminspect

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

VersionReleaseArchitectureRepositoryPackage sizeInstalled sizePublisher repository artifact
2.1-1.fc4343 / updatesaarch64Fedora 43 · updates · aarch64122 KiB465 KiBPackages/r/rpminspect-2.1-1.fc43.aarch64.rpm
2.1-1.fc4343 / updatesx86_64Fedora 43 · updates · x86_64123 KiB434 KiBPackages/r/rpminspect-2.1-1.fc43.x86_64.rpm
2.0-5.fc4343 / everythingaarch64Fedora 43 · Everything · aarch64121 KiB460 KiBPackages/r/rpminspect-2.0-5.fc43.aarch64.rpm
2.0-5.fc4343 / everythingx86_64Fedora 43 · Everything · x86_64121 KiB428 KiBPackages/r/rpminspect-2.0-5.fc43.x86_64.rpm

Field source: Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

2.1-1.fc43 / aarch64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 93f429893c28569ddb104bc0a9ec3ab5c7177b9e3150396ce8fb771afe478766

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '93f429893c28569ddb104bc0a9ec3ab5c7177b9e3150396ce8fb771afe478766' 'rpminspect-2.1-1.fc43.aarch64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac

2.1-1.fc43 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 83bc17513b143a7d801f08c69f04cc2473ded34c985ab61ae857899aa1ebfbf6

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '83bc17513b143a7d801f08c69f04cc2473ded34c985ab61ae857899aa1ebfbf6' 'rpminspect-2.1-1.fc43.x86_64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

2.0-5.fc43 / aarch64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 880b943d0fc438b3de2bd506a47aeca945df8239085807c2b883db0e2def2c49

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' '880b943d0fc438b3de2bd506a47aeca945df8239085807c2b883db0e2def2c49' 'rpminspect-2.0-5.fc43.aarch64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2

2.0-5.fc43 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: ab6cd067eec0d17f9f99eac224994aa96766a6c1ce0b5b48faa5b52dbca3a4ae

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s %s\n' 'ab6cd067eec0d17f9f99eac224994aa96766a6c1ce0b5b48faa5b52dbca3a4ae' 'rpminspect-2.0-5.fc43.x86_64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description
25/25
Artifact path and source digest
25/25
Dependency metadata
15/15
Package-file index
15/15
Homepage
5/5
License text
5/5
Source package or maintainer
10/10

Recorded total: 100/100

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2, Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2, Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac, Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

  • Fedora 43 Everything aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    6c2a7b7225a6bd12acd5c95dcd0350a0a5929e195692ff68eb31db0ee6b9897b
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

  • Fedora 43 Everything x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    42c0002750de6066124693fff143f4854c1e29474d893f7e6a7616012d41338f
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

  • Fedora 43 updates aarch64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    0af1807dead0a1d28599a942743e244fe57da21cf6a935b3e4155f4a3f1070a1
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

  • Fedora 43 updates x86_64Sep 1, 2026

    Authoritative source; repository metadata signature verified, revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

    Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.

    Repository-signature verification record
    Signed-object SHA-256
    3ae5fecc3db8c7b4ce0cf54a8ea572ed4694e7e132e201c2f6ab6570259d1061
    Signer fingerprint
    Not recorded
    Keyring revision
    RPM-GPG-KEY-fedora-43-primary
    SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
    Tool and policy
    1
    openfactory-software-catalog-signature-v1
    Verification time
    Sep 1, 2026
    Signed Release → package-index hash linkage

    Path: Not recorded
    Expected SHA-256: Not recorded
    Observed SHA-256: Not recorded
    Result: match verified

rpminspect Package for Fedora 43 | OpenFactory