Skip to content

Instantly share code, notes, and snippets.

@julian-klode

julian-klode/remove-cdimage-2012-fragment.diff

Created August 18, 2026 21:42
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save julian-klode/aa01332b43c91736de5c5a43e361951b to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save julian-klode/aa01332b43c91736de5c5a43e361951b to your computer and use it in GitHub Desktop.
Download ZIP
Raw
remove-cdimage-2012-fragment.diff
diff --git a/SHA512SUMS.txt.asc b/SHA512SUMS.txt.asc
index 1ee7c8a..23c4ab7 100644
--- a/SHA512SUMS.txt.asc
+++ b/SHA512SUMS.txt.asc
@@ -1,36 +1,39 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
-4e344ffbb31f205af8c6db3c260222e4af886af4d5c28462106c579d7ae46f91153340eafad843186d7788370634d8097c117748921455e5bbb219bf08a28a40 keyrings/ubuntu-archive-keyring.gpg
+b7008babec93c693a31bb9504f6bb0be48758c0e7175ac6c1a90e0ac97ede2b5d1e1025d6ef506e08c92a8e6c15e303fca0ed96a3d22ab5c5f8f8290adac2e3a keyrings/ubuntu-archive-keyring.gpg
f67f81c8fbe6b68c51b1950007604d793a24d839452ade8f5763c52774efd4b9a166322e76ac1030d25e28c049cbebf813df5d4a5a26263206a978ce0f13109f keyrings/ubuntu-archive-removed-keys.gpg
+bff7bace54a31eff01105d19ff218d57d7feafeae3ea0840889f0a8e46a521fb97c00372df4333de878b372afd63b1f9b06ab26ce3114bdf4a52dd79e5592dff keyrings/ubuntu-cdimage-keyring.gpg
5dc6466c19ca76d34b3b4865a919931254744ad329af501a7168937443a1379ef182c97d2258250a46a0745017673710b40431af86ff861bb440c0c56b37a1ef keyrings/ubuntu-cloud-keyring.gpg
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e keyrings/ubuntu-cloud-removed-keys.gpg
-a1d9077bfb901d0c8e5eb21f3e08f317c9eb9e4bc1a4d76864163f421a519ddc119a388da3e92f356a85cd53b73f42d248f0016fae53befd3742f57779bc1de9 keyrings/ubuntu-cloudimage-keyring.gpg
+af858a3512f8e3e5a23d38a20c9fe9331a2dc15116c5e51602c47588eb4898f1ca2d6b486cb2021040c8ad78b6adbfb5812001e1e8ae990f0d50f36045fdd385 keyrings/ubuntu-cloudimage-keyring.gpg
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e keyrings/ubuntu-cloudimage-removed-keys.gpg
-be0462a721cb6e29aa8f7d9bc873f1e757b17c5637dc8a85a025a50d0398f5952bf6271e5d5512594b4438f4b491ec03e33d4a5e325eddbb432df806b7bc6ce0 keyrings/ubuntu-dbgsym-keyring.gpg
+a9d80214372230bd9f8f71704d5181c7b16b4f5b1dfc8c245c7322900d079008ffec0e23f4d0691466ba666f1cc3268664a35c799efdeface6562c5529123592 keyrings/ubuntu-dbgsym-keyring.gpg
d62b4d316850e95d4e3d0d485906ad74791e5117fae4ba8cb96b1958f7365b64d58f4e9f8c4c7056ed8e43a09a402dddf117d12180249ef65812dc8a35caa227 keyrings/ubuntu-dbgsym-removed-keys.gpg
-a7fa6a51e3b0e243edfeaa24819979fe680379d95e63d38abae5246dfed0484a97b6e36678e8d70c4d0006a241296b979195ad8c1da47c84839432502b42a582 keyrings/ubuntu-keyring-2008-oem.gpg
-bff7bace54a31eff01105d19ff218d57d7feafeae3ea0840889f0a8e46a521fb97c00372df4333de878b372afd63b1f9b06ab26ce3114bdf4a52dd79e5592dff keyrings/ubuntu-keyring-2012-cdimage.gpg
-f9676509421f3d1d844dbc8870d70a96af0701b07960dc80de3b97201c7027cb2687ad8c14dcf1b6ce6d61353e82410c4454de4384321c285f895ba24c079ff4 keyrings/ubuntu-keyring-2012-cloud-archive.gpg
-be0462a721cb6e29aa8f7d9bc873f1e757b17c5637dc8a85a025a50d0398f5952bf6271e5d5512594b4438f4b491ec03e33d4a5e325eddbb432df806b7bc6ce0 keyrings/ubuntu-keyring-2016-dbgsym.gpg
-abd75abf26f1230dcbb89d019247d67e581c087beaee234f09fbf99f823573499a68bfeaed6bdb514aab6921931c79e03c58df006f67f2a26113ab9b738d419b keyrings/ubuntu-keyring-2018-archive.gpg
-33445624954aace8b6338657cb3050c12f58ef9f4ee0f9bf2bac1a73a4ff02f701d033e72625e8891556db8e308ca546f327e2f16f674322c1f50dc70b463c43 keyrings/ubuntu-keyring-2020-oem.gpg
+e9f20be5b2922d63c2bd130c923b5efe4af034e13fb8288911e53085b9891f5583be700b3afac036e10e543a89083f750059c4b3b4d60fc2706e1a1f105b3828 keyrings/ubuntu-keyring-2008-oem.gpg
+f7d0739ad2e7bcebb2cf1dec6b4240ef86777a81114d40ba8b88bf4b777b6e755eabbcec67dc98331eb5fdbefc815b8a7b7fcb7cb3a0655e2e1ea3a03209ab00 keyrings/ubuntu-keyring-2012-cloud-archive.gpg
+a9d80214372230bd9f8f71704d5181c7b16b4f5b1dfc8c245c7322900d079008ffec0e23f4d0691466ba666f1cc3268664a35c799efdeface6562c5529123592 keyrings/ubuntu-keyring-2016-dbgsym.gpg
+6264c64db9df0511552b752b1fa3cc6acc1ebbc9569a3c29c85a79e089940fa86c957abbfa83c1f4bf60aaa59b98e2e8cfb28bef148e732d1b645648f34c0863 keyrings/ubuntu-keyring-2018-archive.gpg
+0207c7d0e59b716c3d4eab07de9d6f2d6114ab152b538d40d17f038fd1b1029697f56482c6c467b7b8980d135fc682375146401efd4a41c473468bba6e8bac1e keyrings/ubuntu-keyring-2020-oem.gpg
6eb5787bfc07630e2ce9b320b1466e6faf07944960df7bdd0cfe4650290be44d170a0fd07ba9255f0c5a8e08cd214bbe5b4a2288a6967b17e6dd5f4fb2eb378a keyrings/ubuntu-master-keyring.gpg
425719532af91363c571508dac276396238b2e1b6443f162aba47c4a735e039154f6421533913077c04113abe71b991f3512401813a177e2600f2850ccbd965d keyrings/ubuntu-oem-keyring.gpg
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e keyrings/ubuntu-oem-removed-keys.gpg
+
-----BEGIN PGP SIGNATURE-----
-iQIzBAEBCgAdFiEEEGE7myEXf/A3gIG6vYIFkwJwwaUFAmVlRaYACgkQvYIFkwJw
-waVgOg/7BRU88Tx5UvJr4OI0AqVaPJu2VdjFXmlsyQck58W/4gSPvtM/QUiuh6qa
-zHiIpirvlYxi3GVqRPlrNRFBx9F9ZkOclNnD7wM1680Jmn273NIJAuIHgSCG19z+
-J3m3JC5wauhn1pBiJ6PtFs0zAR6/jh5OWtXeOPU+Qre0yAQTHJS3mpzTHsCnvxXU
-M81Cu3W0hQ5NLfvuiN+oyPqeJSnfThI00cL+OE/vkUslfiYIn8lrGhAya+z6+X+P
-lPGdPjgRHlNSf6W6mmRvHjcgucY54LydfGh48wrVoe51HrgvR2sC0IE/Qt7XW1Kr
-zGP2SpdcDKYP8VhwZ/DUFU7xH+hSUnELWN2w0TfSTqOqNIeNMTG8F+myvN+zTHoP
-eYIuvQldacEs5EU3/JVQa9E9W2ASgyxgHJOHhVrtLPXvswpUmjQgDyLdJv5ABsbX
-k+ggrhDgzaOXY23+n26gIMFJHz4x+7JwOEbK2WVEvbmyGAR3sjG6sWg82qj6ZZXh
-biSyno+geVca/enFYZaFvVVbkHL4czqkbBLOAPZs/iSNIo2AsEdMOzn+To9ldEDE
-O69KVUznZasUIe6813SBya2l6XSNLue9HQdLhUQLIuXFTBnCVvq9SxpVn9srfxSr
-fNon/b77srOv5IZrDkcsecvnamndhfhCNnfzh5o8UqDFyV73ktA=
-=NMap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+=aOza
-----END PGP SIGNATURE-----
diff --git a/debian/changelog b/debian/changelog
index 3389d34..50f41dd 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,18 @@
+ubuntu-keyring (2026.08.18) stonking; urgency=medium
+
+ * Drop ubuntu-keyring-udeb
+ * Remove obsolete postinst scripts
+ * Remove cdimage fragment and add ubuntu-cdimage-keyring.gpg
+ * Rename GnuPG to OpenPGP
+ * Remove transitional ubuntu-cloudimage-keyring
+ * ubuntu-archive-keyring: Remove the cdimage key
+ * Update keys with new self-signatures (LP: #2163397)
+ - ubuntu-cloudimage-keyring
+ - ubuntu-dbgsym-keyring
+ * Regenerate fragments with `sq`
+
+ -- Julian Andres Klode <juliank@ubuntu.com> Tue, 18 Aug 2026 23:33:48 +0200
+
ubuntu-keyring (2023.11.28.1build1) resolute; urgency=medium
* No-change mass rebuild for Ubuntu 26.04 (LP: #2132257)
diff --git a/debian/control b/debian/control
index c54b949..ab47dbc 100644
--- a/debian/control
+++ b/debian/control
@@ -3,7 +3,7 @@ Section: misc
Priority: optional
Maintainer: Dimitri John Ledkov <dimitri.ledkov@canonical.com>
Standards-Version: 4.1.3
-Build-Depends: gnupg, debian-keyring, debhelper (>= 10)
+Build-Depends: sq, debian-keyring, debhelper (>= 10)
Package: ubuntu-keyring
Priority: important
@@ -11,14 +11,14 @@ Architecture: all
Multi-Arch: foreign
Breaks: ubuntu-cloudimage-keyring (<< 2018.02.05)
Replaces: ubuntu-cloudimage-keyring (<< 2018.02.05)
-Description: GnuPG keys of the Ubuntu archive
+Description: OpenPGP keys of the Ubuntu archive
The Ubuntu project digitally signs its Release files. This package
contains the archive keys used for that.
Package: ubuntu-cloud-keyring
Priority: optional
Architecture: all
-Description: GnuPG keys of the Ubuntu Cloud Archive
+Description: OpenPGP keys of the Ubuntu Cloud Archive
The Ubuntu project digitally signs its Release files. This package
contains the archive keys used for the ubuntu-cloud.archive.canonical.com
repository.
@@ -26,7 +26,7 @@ Description: GnuPG keys of the Ubuntu Cloud Archive
Package: ubuntu-oem-keyring
Priority: optional
Architecture: all
-Description: GnuPG keys of the Ubuntu OEM Vendor Archive
+Description: OpenPGP keys of the Ubuntu OEM Vendor Archive
The Ubuntu project digitally signs its Release files. This package
contains the archive keys used for the oem.archive.canonical.com
repository.
@@ -34,15 +34,6 @@ Description: GnuPG keys of the Ubuntu OEM Vendor Archive
Package: ubuntu-dbgsym-keyring
Priority: optional
Architecture: all
-Description: GnuPG keys of the Ubuntu Debug Symbols Archive
+Description: OpenPGP keys of the Ubuntu Debug Symbols Archive
The Ubuntu project digitally signs its Release files. This package
contains the archive keys used for the ddebs.ubuntu.com repository.
-
-Package: ubuntu-cloudimage-keyring
-Priority: optional
-Architecture: all
-Multi-Arch: foreign
-Depends: ubuntu-keyring (>= 2018.02.06)
-Description: dummy transitional package for GnuPG keys of cloudimage keyring
- This package can be safely removed, as cloudimage keyring is now
- shipped in the ubuntu-keyring package
diff --git a/debian/copyright b/debian/copyright
index 2b70f14..f9bb6da 100644
--- a/debian/copyright
+++ b/debian/copyright
@@ -1,4 +1,4 @@
-This is Ubuntu GNU's GnuPG keyrings of archive keys.
+This is Ubuntu GNU's OpenPGP keyrings of archive keys.
This package was originally put together by Michael Vogt
<michael.vogt@canonical.com>
diff --git a/debian/rules b/debian/rules
index 826fccd..46aad7c 100755
--- a/debian/rules
+++ b/debian/rules
@@ -5,23 +5,24 @@
binary: checkkeyrings
+sq := sq --home=none
+export-cert = $(sq) --keyring keyrings/$(1).gpg cert export --cert $(3) | $(sq) packet dearmor > keyrings/$(2).gpg
+
regenerate-key-fragments:
rm -f keyrings/ubuntu-keyring-*.gpg
- gpg --no-default-keyring --export-options export-minimal --keyring ./keyrings/ubuntu-archive-keyring.gpg --output keyrings/ubuntu-keyring-2018-archive.gpg --export 0xF6ECB3762474EDA9D21B7022871920D1991BC93C
- gpg --no-default-keyring --export-options export-minimal --keyring ./keyrings/ubuntu-archive-keyring.gpg --output keyrings/ubuntu-keyring-2012-cdimage.gpg --export 0x843938DF228D22F7B3742BC0D94AA3F0EFE21092
- gpg --no-default-keyring --export-options export-minimal --keyring ./keyrings/ubuntu-cloud-keyring.gpg --output keyrings/ubuntu-keyring-2012-cloud-archive.gpg --export 0x391A9AA2147192839E9DB0315EDB1B62EC4926EA
- gpg --no-default-keyring --export-options export-minimal --keyring ./keyrings/ubuntu-oem-keyring.gpg --output keyrings/ubuntu-keyring-2008-oem.gpg --export 0x236252602787D6BDC2336849F9FDA6BED73CDC22
- gpg --no-default-keyring --export-options export-minimal --keyring ./keyrings/ubuntu-oem-keyring.gpg --output keyrings/ubuntu-keyring-2020-oem.gpg --export 0x59AC787C2A8C78BA5ECA0B2ED4D1EAED36962F69
- gpg --no-default-keyring --export-options export-minimal --keyring ./keyrings/ubuntu-dbgsym-keyring.gpg --output keyrings/ubuntu-keyring-2016-dbgsym.gpg --export 0xF2EDC64DC5AEE1F6B9C621F0C8CAB6595FDFF622
- sha512sum keyrings/*.gpg | gpg --clearsign > SHA512SUMS.txt.asc
+ $(call export-cert,ubuntu-archive-keyring,ubuntu-keyring-2018-archive,0xF6ECB3762474EDA9D21B7022871920D1991BC93C)
+ $(call export-cert,ubuntu-cloud-keyring,ubuntu-keyring-2012-cloud-archive,0x391A9AA2147192839E9DB0315EDB1B62EC4926EA)
+ $(call export-cert,ubuntu-oem-keyring,ubuntu-keyring-2008-oem,0x236252602787D6BDC2336849F9FDA6BED73CDC22)
+ $(call export-cert,ubuntu-oem-keyring,ubuntu-keyring-2020-oem,0x59AC787C2A8C78BA5ECA0B2ED4D1EAED36962F69)
+ $(call export-cert,ubuntu-dbgsym-keyring,ubuntu-keyring-2016-dbgsym,0xF2EDC64DC5AEE1F6B9C621F0C8CAB6595FDFF622)
+ sha512sum keyrings/*.gpg | sq sign --cleartext --signer-self > SHA512SUMS.txt.asc
checkkeyrings:
- HOME=$(CURDIR) gpg --no-default-keyring --keyring /usr/share/keyrings/debian-keyring.gpg --decrypt SHA512SUMS.txt.asc | tee verified | sha512sum -c -
+ $(sq) verify --signer-file /usr/share/keyrings/debian-keyring.gpg --cleartext SHA512SUMS.txt.asc | tee verified | sha512sum -c -
# Check what are the current fragments
sha512sum keyrings/*.gpg > current
# Check that all fragments were in the verified SHA512SUMS file
! grep -f verified -v current
- rm -rf .gnupg/
override_dh_installdeb:
dh_installdeb
@@ -29,5 +30,5 @@ override_dh_installdeb:
rm -f debian/*/DEBIAN/conffiles
override_dh_clean:
- rm -rf .gnupg verified current
+ rm -rf verified current
dh_clean
diff --git a/debian/ubuntu-cloud-keyring.install b/debian/ubuntu-cloud-keyring.install
deleted file mode 100644
index 37aa4fc..0000000
--- a/debian/ubuntu-cloud-keyring.install
+++ /dev/null
@@ -1,3 +0,0 @@
-keyrings/ubuntu-keyring-2012-cloud-archive.gpg etc/apt/trusted.gpg.d/
-keyrings/ubuntu-cloud-keyring.gpg usr/share/keyrings/
-keyrings/ubuntu-cloud-removed-keys.gpg usr/share/keyrings/
diff --git a/debian/ubuntu-keyring.install b/debian/ubuntu-keyring.install
index f52eb2f..d721d6a 100644
--- a/debian/ubuntu-keyring.install
+++ b/debian/ubuntu-keyring.install
@@ -1,7 +1,7 @@
keyrings/ubuntu-keyring-2018-archive.gpg etc/apt/trusted.gpg.d/
-keyrings/ubuntu-keyring-2012-cdimage.gpg etc/apt/trusted.gpg.d/
keyrings/ubuntu-archive-keyring.gpg usr/share/keyrings/
keyrings/ubuntu-archive-removed-keys.gpg usr/share/keyrings/
keyrings/ubuntu-master-keyring.gpg usr/share/keyrings/
+keyrings/ubuntu-cdimage-keyring.gpg usr/share/keyrings/
keyrings/ubuntu-cloudimage-keyring.gpg usr/share/keyrings/
keyrings/ubuntu-cloudimage-removed-keys.gpg usr/share/keyrings/
diff --git a/keyrings/ubuntu-archive-keyring.gpg b/keyrings/ubuntu-archive-keyring.gpg
index 1585fd1..45e922e 100644
--- a/keyrings/ubuntu-archive-keyring.gpg
+++ b/keyrings/ubuntu-archive-keyring.gpg
@@ -1,4 +1,4 @@
-Public-Key Packet, old CTB, 525 bytes
+Public-Key Packet, new CTB, 525 bytes
Version: 4
Creation time: 2012-05-11 21:15:36 UTC
Pk algo: RSA
@@ -6,18 +6,10 @@ Public-Key Packet, old CTB, 525 bytes
Fingerprint: 790BC7277767219C42C86F933B4FE6ACC0B21F32
KeyID: 3B4FE6ACC0B21F32
-Trust Packet, old CTB, 12 bytes
- Value:
- 00000000 00 00 67 70 67 01 00 00 00 00 00 00 ..gpg.......
-
-User ID Packet, old CTB, 66 bytes
+User ID Packet, new CTB, 66 bytes
Value: Ubuntu Archive Automatic Signing Key (2012) <ftpmaster@ubuntu.com>
-Trust Packet, old CTB, 12 bytes
- Value:
- 00000000 00 00 67 70 67 02 00 00 00 00 00 00 ..gpg.......
-
-Signature Packet, old CTB, 568 bytes
+Signature Packet, new CTB, 568 bytes
Version: 4
Type: PositiveCertification
Pk algo: RSA
@@ -36,53 +28,7 @@ Signature Packet, old CTB, 568 bytes
Digest prefix: 5D7E
Level: 0 (signature over data)
-Trust Packet, old CTB, 6 bytes
- Value:
- 00000000 00 03 67 70 67 00 ..gpg.
-
-Public-Key Packet, old CTB, 525 bytes
- Version: 4
- Creation time: 2012-05-11 22:10:48 UTC
- Pk algo: RSA
- Pk size: 4096 bits
- Fingerprint: 843938DF228D22F7B3742BC0D94AA3F0EFE21092
- KeyID: D94AA3F0EFE21092
-
-Trust Packet, old CTB, 12 bytes
- Value:
- 00000000 00 00 67 70 67 01 00 00 00 00 00 00 ..gpg.......
-
-User ID Packet, old CTB, 65 bytes
- Value: Ubuntu CD Image Automatic Signing Key (2012) <cdimage@ubuntu.com>
-
-Trust Packet, old CTB, 12 bytes
- Value:
- 00000000 00 00 67 70 67 02 00 00 00 00 00 00 ..gpg.......
-
-Signature Packet, old CTB, 567 bytes
- Version: 4
- Type: PositiveCertification
- Pk algo: RSA
- Hash algo: SHA512
- Hashed area:
- Signature creation time: 2012-05-11 22:10:48 UTC
- Key flags: CS
- Symmetric algo preferences: AES256, AES192, AES128, CAST5
- Hash preferences: SHA512, SHA384, SHA256, SHA224
- Compression preferences: Zlib, BZip2, Zip, Uncompressed
- Features: SEIPDv1
- Keyserver preferences: no modify
- Unhashed area:
- Issuer: D94AA3F0EFE21092
- Ubuntu CD Image Automatic Signing Key (2012) <cdimage@ubuntu.com> (UNAUTHENTICATED)
- Digest prefix: 4840
- Level: 0 (signature over data)
-
-Trust Packet, old CTB, 6 bytes
- Value:
- 00000000 00 03 67 70 67 00 ..gpg.
-
-Public-Key Packet, old CTB, 525 bytes
+Public-Key Packet, new CTB, 525 bytes
Version: 4
Creation time: 2018-09-17 15:01:46 UTC
Pk algo: RSA
@@ -90,18 +36,10 @@ Public-Key Packet, old CTB, 525 bytes
Fingerprint: F6ECB3762474EDA9D21B7022871920D1991BC93C
KeyID: 871920D1991BC93C
-Trust Packet, old CTB, 12 bytes
- Value:
- 00000000 00 00 67 70 67 01 00 00 00 00 00 00 ..gpg.......
-
-User ID Packet, old CTB, 66 bytes
+User ID Packet, new CTB, 66 bytes
Value: Ubuntu Archive Automatic Signing Key (2018) <ftpmaster@ubuntu.com>
-Trust Packet, old CTB, 12 bytes
- Value:
- 00000000 00 00 67 70 67 02 00 00 00 00 00 00 ..gpg.......
-
-Signature Packet, old CTB, 568 bytes
+Signature Packet, new CTB, 568 bytes
Version: 4
Type: PositiveCertification
Pk algo: RSA
@@ -120,7 +58,3 @@ Signature Packet, old CTB, 568 bytes
Digest prefix: 2C73
Level: 0 (signature over data)
-Trust Packet, old CTB, 6 bytes
- Value:
- 00000000 00 03 67 70 67 00 ..gpg.
-
diff --git a/keyrings/ubuntu-keyring-2012-cdimage.gpg b/keyrings/ubuntu-cdimage-keyring.gpg
similarity index 100%
rename from keyrings/ubuntu-keyring-2012-cdimage.gpg
rename to keyrings/ubuntu-cdimage-keyring.gpg
diff --git a/keyrings/ubuntu-cloudimage-keyring.gpg b/keyrings/ubuntu-cloudimage-keyring.gpg
index 51b69de..c295a5f 100644
--- a/keyrings/ubuntu-cloudimage-keyring.gpg
+++ b/keyrings/ubuntu-cloudimage-keyring.gpg
@@ -1,86 +1,122 @@
-Public-Key Packet, old CTB, 525 bytes
+Public-Key Packet, new CTB, 525 bytes
Version: 4
- Creation time: 2009-09-15 23:54:29 UTC
+ Creation time: 2012-10-27 23:52:49 UTC
Pk algo: RSA
Pk size: 4096 bits
- Fingerprint: D2EB44626FDDC30B513D5BB71A5D6C4C7DB87C81
- KeyID: 1A5D6C4C7DB87C81
-
-Trust Packet, old CTB, 12 bytes
- Value:
- 00000000 00 00 67 70 67 01 00 00 00 00 00 00 ..gpg.......
+ Fingerprint: 4A3CE3CD565D7EB5C810E2B97FF3F408476CF100
+ KeyID: 7FF3F408476CF100
-User ID Packet, old CTB, 52 bytes
- Value: UEC Image Automatic Signing Key <cdimage@ubuntu.com>
+User ID Packet, new CTB, 111 bytes
+ Value: Ubuntu Cloud Image Builder (Canonical Internal Cloud Image Builder) <ubuntu-cloudbuilder-noreply@canonical.com>
-Trust Packet, old CTB, 12 bytes
- Value:
- 00000000 00 00 67 70 67 02 00 00 00 00 00 00 ..gpg.......
+Signature Packet, new CTB, 593 bytes
+ Version: 4
+ Type: PositiveCertification
+ Pk algo: RSA
+ Hash algo: SHA512
+ Hashed area:
+ Key flags: CS
+ Keyserver preferences: no modify
+ Issuer Fingerprint: 4A3CE3CD565D7EB5C810E2B97FF3F408476CF100
+ Signature creation time: 2025-08-28 05:15:20 UTC
+ Symmetric algo preferences: AES256, AES192, AES128, TripleDES
+ PreferredAEADAlgorithms:
+ 00000000 02
+ Hash preferences: SHA512, SHA384, SHA256, SHA224, SHA1
+ Compression preferences: Zlib, BZip2, Zip
+ Features: SEIPDv1, #1, #2
+ Unhashed area:
+ Issuer: 7FF3F408476CF100
+ Digest prefix: C08B
+ Level: 0 (signature over data)
-Signature Packet, old CTB, 567 bytes
+Signature Packet, new CTB, 568 bytes
Version: 4
Type: PositiveCertification
Pk algo: RSA
Hash algo: SHA1
Hashed area:
+ Signature creation time: 2012-10-27 23:52:49 UTC
Key flags: CS
+ Symmetric algo preferences: AES256, AES192, AES128, CAST5, TripleDES
+ Hash preferences: SHA256, SHA1, SHA384, SHA512, SHA224
+ Compression preferences: Zlib, BZip2, Zip
Features: SEIPDv1
Keyserver preferences: no modify
- Signature creation time: 2009-09-15 23:58:29 UTC
- Symmetric algo preferences: AES256, AES192, AES128, CAST5
- Hash preferences: SHA512, SHA384, SHA256, SHA224
- Compression preferences: Zlib, BZip2, Zip, Uncompressed
Unhashed area:
- Issuer: 1A5D6C4C7DB87C81
- Digest prefix: 2E27
+ Issuer: 7FF3F408476CF100
+ Digest prefix: BD12
Level: 0 (signature over data)
-Trust Packet, old CTB, 6 bytes
- Value:
- 00000000 00 03 67 70 67 00 ..gpg.
-
-Public-Key Packet, old CTB, 525 bytes
+Public-Subkey Packet, new CTB, 525 bytes
Version: 4
Creation time: 2012-10-27 23:52:49 UTC
Pk algo: RSA
Pk size: 4096 bits
- Fingerprint: 4A3CE3CD565D7EB5C810E2B97FF3F408476CF100
- KeyID: 7FF3F408476CF100
+ Fingerprint: B5A30724363BA5C6B708DF9E212F933A9D817405
+ KeyID: 212F933A9D817405
-Trust Packet, old CTB, 12 bytes
- Value:
- 00000000 00 00 67 70 67 01 00 00 00 00 00 00 ..gpg.......
+Signature Packet, new CTB, 566 bytes
+ Version: 4
+ Type: SubkeyBinding
+ Pk algo: RSA
+ Hash algo: SHA512
+ Hashed area:
+ Key flags: EtEr
+ Issuer Fingerprint: 4A3CE3CD565D7EB5C810E2B97FF3F408476CF100
+ Signature creation time: 2025-08-28 05:15:20 UTC
+ Unhashed area:
+ Issuer: 7FF3F408476CF100
+ Digest prefix: 2BE8
+ Level: 0 (signature over data)
-User ID Packet, old CTB, 111 bytes
- Value: Ubuntu Cloud Image Builder (Canonical Internal Cloud Image Builder) <ubuntu-cloudbuilder-noreply@canonical.com>
+Public-Key Packet, new CTB, 525 bytes
+ Version: 4
+ Creation time: 2009-09-15 23:54:29 UTC
+ Pk algo: RSA
+ Pk size: 4096 bits
+ Fingerprint: D2EB44626FDDC30B513D5BB71A5D6C4C7DB87C81
+ KeyID: 1A5D6C4C7DB87C81
-Trust Packet, old CTB, 12 bytes
- Value:
- 00000000 00 00 67 70 67 02 00 00 00 00 00 00 ..gpg.......
+User ID Packet, new CTB, 52 bytes
+ Value: UEC Image Automatic Signing Key <cdimage@ubuntu.com>
-Signature Packet, old CTB, 568 bytes
+Signature Packet, new CTB, 593 bytes
Version: 4
Type: PositiveCertification
Pk algo: RSA
- Hash algo: SHA1
+ Hash algo: SHA512
Hashed area:
- Signature creation time: 2012-10-27 23:52:49 UTC
Key flags: CS
- Symmetric algo preferences: AES256, AES192, AES128, CAST5, TripleDES
- Hash preferences: SHA256, SHA1, SHA384, SHA512, SHA224
+ Keyserver preferences: no modify
+ Issuer Fingerprint: D2EB44626FDDC30B513D5BB71A5D6C4C7DB87C81
+ Signature creation time: 2025-08-28 05:15:23 UTC
+ Symmetric algo preferences: AES256, AES192, AES128, TripleDES
+ PreferredAEADAlgorithms:
+ 00000000 02
+ Hash preferences: SHA512, SHA384, SHA256, SHA224, SHA1
Compression preferences: Zlib, BZip2, Zip
+ Features: SEIPDv1, #1, #2
+ Unhashed area:
+ Issuer: 1A5D6C4C7DB87C81
+ Digest prefix: 5D3A
+ Level: 0 (signature over data)
+
+Signature Packet, new CTB, 567 bytes
+ Version: 4
+ Type: PositiveCertification
+ Pk algo: RSA
+ Hash algo: SHA1
+ Hashed area:
+ Key flags: CS
Features: SEIPDv1
Keyserver preferences: no modify
+ Signature creation time: 2009-09-15 23:58:29 UTC
+ Symmetric algo preferences: AES256, AES192, AES128, CAST5
+ Hash preferences: SHA512, SHA384, SHA256, SHA224
+ Compression preferences: Zlib, BZip2, Zip, Uncompressed
Unhashed area:
- Issuer: 7FF3F408476CF100
- Digest prefix: BD12
+ Issuer: 1A5D6C4C7DB87C81
+ Digest prefix: 2E27
Level: 0 (signature over data)
-Trust Packet, old CTB, 6 bytes
- Value:
- 00000000 00 03 67 70 67 00 ..gpg.
-
-Trust Packet, old CTB, 6 bytes
- Value:
- 00000000 00 03 67 70 67 00 ..gpg.
-
diff --git a/keyrings/ubuntu-dbgsym-keyring.gpg b/keyrings/ubuntu-dbgsym-keyring.gpg
index 9f0406c..903ef1c 100644
--- a/keyrings/ubuntu-dbgsym-keyring.gpg
+++ b/keyrings/ubuntu-dbgsym-keyring.gpg
@@ -1,4 +1,4 @@
-Public-Key Packet, old CTB, 525 bytes
+Public-Key Packet, new CTB, 525 bytes
Version: 4
Creation time: 2016-03-21 10:24:43 UTC
Pk algo: RSA
@@ -6,10 +6,31 @@ Public-Key Packet, old CTB, 525 bytes
Fingerprint: F2EDC64DC5AEE1F6B9C621F0C8CAB6595FDFF622
KeyID: C8CAB6595FDFF622
-User ID Packet, old CTB, 90 bytes
+User ID Packet, new CTB, 90 bytes
Value: Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
-Signature Packet, old CTB, 568 bytes
+Signature Packet, new CTB, 593 bytes
+ Version: 4
+ Type: PositiveCertification
+ Pk algo: RSA
+ Hash algo: SHA512
+ Hashed area:
+ Key flags: CS
+ Keyserver preferences: no modify
+ Issuer Fingerprint: F2EDC64DC5AEE1F6B9C621F0C8CAB6595FDFF622
+ Signature creation time: 2025-08-28 05:15:25 UTC
+ Symmetric algo preferences: AES256, AES192, AES128, TripleDES
+ PreferredAEADAlgorithms:
+ 00000000 02
+ Hash preferences: SHA512, SHA384, SHA256, SHA224, SHA1
+ Compression preferences: Zlib, BZip2, Zip
+ Features: SEIPDv1, #1, #2
+ Unhashed area:
+ Issuer: C8CAB6595FDFF622
+ Digest prefix: 9904
+ Level: 0 (signature over data)
+
+Signature Packet, new CTB, 568 bytes
Version: 4
Type: PositiveCertification
Pk algo: RSA
diff --git a/keyrings/ubuntu-keyring-2008-oem.gpg b/keyrings/ubuntu-keyring-2008-oem.gpg
index 41f4359..90eb61c 100644
--- a/keyrings/ubuntu-keyring-2008-oem.gpg
+++ b/keyrings/ubuntu-keyring-2008-oem.gpg
@@ -1,4 +1,4 @@
-Public-Key Packet, old CTB, 269 bytes
+Public-Key Packet, new CTB, 269 bytes
Version: 4
Creation time: 2008-08-07 21:06:00 UTC
Pk algo: RSA
@@ -6,10 +6,10 @@ Public-Key Packet, old CTB, 269 bytes
Fingerprint: 236252602787D6BDC2336849F9FDA6BED73CDC22
KeyID: F9FDA6BED73CDC22
-User ID Packet, old CTB, 65 bytes
+User ID Packet, new CTB, 65 bytes
Value: Canonical Archive Automatic Signing Key <ftpmaster@canonical.com>
-Signature Packet, old CTB, 310 bytes
+Signature Packet, new CTB, 310 bytes
Version: 4
Type: PositiveCertification
Pk algo: RSA
diff --git a/keyrings/ubuntu-keyring-2012-cloud-archive.gpg b/keyrings/ubuntu-keyring-2012-cloud-archive.gpg
index 24f860f..29a5062 100644
--- a/keyrings/ubuntu-keyring-2012-cloud-archive.gpg
+++ b/keyrings/ubuntu-keyring-2012-cloud-archive.gpg
@@ -1,4 +1,4 @@
-Public-Key Packet, old CTB, 525 bytes
+Public-Key Packet, new CTB, 525 bytes
Version: 4
Creation time: 2012-08-14 12:53:44 UTC
Pk algo: RSA
@@ -6,10 +6,10 @@ Public-Key Packet, old CTB, 525 bytes
Fingerprint: 391A9AA2147192839E9DB0315EDB1B62EC4926EA
KeyID: 5EDB1B62EC4926EA
-User ID Packet, old CTB, 61 bytes
+User ID Packet, new CTB, 61 bytes
Value: Canonical Cloud Archive Signing Key <ftpmaster@canonical.com>
-Signature Packet, old CTB, 567 bytes
+Signature Packet, new CTB, 567 bytes
Version: 4
Type: PositiveCertification
Pk algo: RSA
diff --git a/keyrings/ubuntu-keyring-2016-dbgsym.gpg b/keyrings/ubuntu-keyring-2016-dbgsym.gpg
index 9f0406c..903ef1c 100644
--- a/keyrings/ubuntu-keyring-2016-dbgsym.gpg
+++ b/keyrings/ubuntu-keyring-2016-dbgsym.gpg
@@ -1,4 +1,4 @@
-Public-Key Packet, old CTB, 525 bytes
+Public-Key Packet, new CTB, 525 bytes
Version: 4
Creation time: 2016-03-21 10:24:43 UTC
Pk algo: RSA
@@ -6,10 +6,31 @@ Public-Key Packet, old CTB, 525 bytes
Fingerprint: F2EDC64DC5AEE1F6B9C621F0C8CAB6595FDFF622
KeyID: C8CAB6595FDFF622
-User ID Packet, old CTB, 90 bytes
+User ID Packet, new CTB, 90 bytes
Value: Ubuntu Debug Symbol Archive Automatic Signing Key (2016) <ubuntu-archive@lists.ubuntu.com>
-Signature Packet, old CTB, 568 bytes
+Signature Packet, new CTB, 593 bytes
+ Version: 4
+ Type: PositiveCertification
+ Pk algo: RSA
+ Hash algo: SHA512
+ Hashed area:
+ Key flags: CS
+ Keyserver preferences: no modify
+ Issuer Fingerprint: F2EDC64DC5AEE1F6B9C621F0C8CAB6595FDFF622
+ Signature creation time: 2025-08-28 05:15:25 UTC
+ Symmetric algo preferences: AES256, AES192, AES128, TripleDES
+ PreferredAEADAlgorithms:
+ 00000000 02
+ Hash preferences: SHA512, SHA384, SHA256, SHA224, SHA1
+ Compression preferences: Zlib, BZip2, Zip
+ Features: SEIPDv1, #1, #2
+ Unhashed area:
+ Issuer: C8CAB6595FDFF622
+ Digest prefix: 9904
+ Level: 0 (signature over data)
+
+Signature Packet, new CTB, 568 bytes
Version: 4
Type: PositiveCertification
Pk algo: RSA
diff --git a/keyrings/ubuntu-keyring-2018-archive.gpg b/keyrings/ubuntu-keyring-2018-archive.gpg
index bf73252..1fbfaad 100644
--- a/keyrings/ubuntu-keyring-2018-archive.gpg
+++ b/keyrings/ubuntu-keyring-2018-archive.gpg
@@ -1,4 +1,4 @@
-Public-Key Packet, old CTB, 525 bytes
+Public-Key Packet, new CTB, 525 bytes
Version: 4
Creation time: 2018-09-17 15:01:46 UTC
Pk algo: RSA
@@ -6,10 +6,10 @@ Public-Key Packet, old CTB, 525 bytes
Fingerprint: F6ECB3762474EDA9D21B7022871920D1991BC93C
KeyID: 871920D1991BC93C
-User ID Packet, old CTB, 66 bytes
+User ID Packet, new CTB, 66 bytes
Value: Ubuntu Archive Automatic Signing Key (2018) <ftpmaster@ubuntu.com>
-Signature Packet, old CTB, 568 bytes
+Signature Packet, new CTB, 568 bytes
Version: 4
Type: PositiveCertification
Pk algo: RSA
diff --git a/keyrings/ubuntu-keyring-2020-oem.gpg b/keyrings/ubuntu-keyring-2020-oem.gpg
index 6dcce27..46d5f6d 100644
--- a/keyrings/ubuntu-keyring-2020-oem.gpg
+++ b/keyrings/ubuntu-keyring-2020-oem.gpg
@@ -1,4 +1,4 @@
-Public-Key Packet, old CTB, 525 bytes
+Public-Key Packet, new CTB, 525 bytes
Version: 4
Creation time: 2020-04-09 17:11:21 UTC
Pk algo: RSA
@@ -6,10 +6,10 @@ Public-Key Packet, old CTB, 525 bytes
Fingerprint: 59AC787C2A8C78BA5ECA0B2ED4D1EAED36962F69
KeyID: D4D1EAED36962F69
-User ID Packet, old CTB, 89 bytes
+User ID Packet, new CTB, 89 bytes
Value: Canonical OEM Archive Automatic Signing Key (2020) <commercial-engineering@canonical.com>
-Signature Packet, old CTB, 568 bytes
+Signature Packet, new CTB, 568 bytes
Version: 4
Type: PositiveCertification
Pk algo: RSA
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment