Packages / Fedora 43 / Unspecified / gnupg2-verify

Package: gnupg2-verify (2.4.9-5.fc43)

GnuPG signature verification tool

GnuPG is GNU's tool for secure communication and data storage. This package contains the signature verification tool.

Other Packages Related to gnupg2-verify:

dep: ld-linux-aarch64.so.1()(64bit)
Package not available
dep: ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)
Package not available
dep: libassuan.so.0()(64bit)
Package not available
dep: libassuan.so.0(LIBASSUAN_1.0)(64bit)
Package not available
dep: libbz2.so.1()(64bit)
Package not available
dep: libgcrypt.so.20()(64bit)
Package not available
dep: libgcrypt.so.20(GCRYPT_1.6)(64bit)
Package not available
dep: libgpg-error.so.0()(64bit)
Package not available
dep: libgpg-error.so.0(GPG_ERROR_1.0)(64bit)
Package not available
dep: libnpth.so.0()(64bit)
Package not available
dep: libnpth.so.0(NPTH_1.0)(64bit)
Package not available
dep: libz.so.1()(64bit)
Package not available
dep: rtld(GNU_HASH)
Package not available
dep: libc.so.6(GLIBC_2.38)(64bit)
Package not available

Download gnupg2-verify

Architecture	Package size	Installed size	Files	Package
aarch64	164 KiB	364 KiB	list of files	Download
x86_64	172 KiB	348 KiB	list of files	Download

Package file paths (15)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/bin/gpgv
/usr/bin/gpgv2
/usr/lib/.build-id
/usr/lib/.build-id/9e
/usr/lib/.build-id/9e/837416a0b2e1d5aba3707583ad780030128a93
/usr/lib/.build-id/b1
/usr/lib/.build-id/b1/bf42297fc65ac42285c9b82b2e47db80082dd9
/usr/lib/.build-id/e7
/usr/lib/.build-id/e7/9b42f889d5e42e6d370ebf657c70ca2f6a6f7d
/usr/lib/.build-id/f9
/usr/lib/.build-id/f9/5e28a53a336560ebef708d05b275510163f973
/usr/share/licenses/gnupg2-verify
/usr/share/licenses/gnupg2-verify/COPYING
/usr/share/man/man1/gpgv.1.gz
/usr/share/man/man1/gpgv2.1.gz

Field source: Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Fedora 43 in the browser Build an image that includes gnupg2-verify

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
2.4.9-5.fc43	43 / updates	aarch64	Fedora 43 · updates · aarch64	164 KiB	364 KiB	Packages/g/gnupg2-verify-2.4.9-5.fc43.aarch64.rpm
2.4.9-5.fc43	43 / updates	x86_64	Fedora 43 · updates · x86_64	172 KiB	348 KiB	Packages/g/gnupg2-verify-2.4.9-5.fc43.x86_64.rpm
2.4.8-4.fc43	43 / everything	aarch64	Fedora 43 · Everything · aarch64	164 KiB	364 KiB	Packages/g/gnupg2-verify-2.4.8-4.fc43.aarch64.rpm
2.4.8-4.fc43	43 / everything	x86_64	Fedora 43 · Everything · x86_64	171 KiB	348 KiB	Packages/g/gnupg2-verify-2.4.8-4.fc43.x86_64.rpm

Field source: Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

2.4.9-5.fc43 / aarch64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: cd70db1b254346f239363eb2f297defd10134e4aef054b64b42cbe2bb822dd18

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' 'cd70db1b254346f239363eb2f297defd10134e4aef054b64b42cbe2bb822dd18' 'gnupg2-verify-2.4.9-5.fc43.aarch64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac

2.4.9-5.fc43 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: a8be645ecd6d6916195d47128353e50813b58871753d4c5c872d43b348a0d28e

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' 'a8be645ecd6d6916195d47128353e50813b58871753d4c5c872d43b348a0d28e' 'gnupg2-verify-2.4.9-5.fc43.x86_64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

2.4.8-4.fc43 / aarch64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 4a49789148d77d5388affbdc10dc8c603cbd8983ae580121085a37bb07b49410

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' '4a49789148d77d5388affbdc10dc8c603cbd8983ae580121085a37bb07b49410' 'gnupg2-verify-2.4.8-4.fc43.aarch64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2

2.4.8-4.fc43 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 1f5b9887b9657c3ecc972cc48ae12c310ad3b8ca7aff2143c83fa4981cdb689f

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' '1f5b9887b9657c3ecc972cc48ae12c310ad3b8ca7aff2143c83fa4981cdb689f' 'gnupg2-verify-2.4.8-4.fc43.x86_64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description: 25/25
Artifact path and source digest: 25/25
Dependency metadata: 15/15
Package-file index: 15/15
Homepage: 5/5
License text: 5/5
Source package or maintainer: 10/10

Recorded total: 100/100

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2, Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2, Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac, Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

Fedora 43 Everything aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-43&arch=aarch64
Signed-object SHA-256
6c2a7b7225a6bd12acd5c95dcd0350a0a5929e195692ff68eb31db0ee6b9897b
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified
Fedora 43 Everything x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-43&arch=x86_64
Signed-object SHA-256
42c0002750de6066124693fff143f4854c1e29474d893f7e6a7616012d41338f
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified
Fedora 43 updates aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=updates-released-f43&arch=aarch64
Signed-object SHA-256
0af1807dead0a1d28599a942743e244fe57da21cf6a935b3e4155f4a3f1070a1
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified
Fedora 43 updates x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=updates-released-f43&arch=x86_64
Signed-object SHA-256
3ae5fecc3db8c7b4ce0cf54a8ea572ed4694e7e132e201c2f6ab6570259d1061
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified