Re: Many more sigs show when I add --with-colons to --list-sigs

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============4855739501532858295==
Content-Language: en-US
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="------------cdO4Or70xoDabBRzco6RtE5i"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------cdO4Or70xoDabBRzco6RtE5i
Content-Type: multipart/mixed; boundary="------------mTaVdAvlCmSorTYib7YIvaWq";
 protected-headers="v1"; hp="clear"
Message-ID: <[email protected]>
Date: Mon, 27 Jul 2026 21:44:01 -0400
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: Many more sigs show when I add --with-colons to --list-sigs
To: [email protected]
References: <[email protected]>
Content-Language: en-US
From: "Robert J. Hansen" <[email protected]>
In-Reply-To: <[email protected]>

--------------mTaVdAvlCmSorTYib7YIvaWq
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

> I'm trying to understand some odd behavior I'm seeing in gpg. I've had
> my key since 1999 and I've got dozens of signatures on it. But when I
> run

A partial answer:

-----
sig:?::1:9710B89BCA57AD7C:1104308002:1105517602:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1105474213:1106683813:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1106640560:1107850160:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1107807915:1109017515:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1108780465:1109990065:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1110013668:1111223268:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1111310073:1112519673:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1112519896:1113729496:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1113726620:1114936220:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1113769839:1114979439:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1114978523:1116188123:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1116146221:1117355821:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1116146221:1117355821:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1116319455:1117529055:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1117485606:1118695206:::[User ID not
found]:10x:::::2:
sig:?::1:9710B89BCA57AD7C:1117571920:1118781520:::[User ID not
found]:10x:::::2:
-----

See all those signatures coming from the same certificate? GnuPG treats
only the most recent signature from a certificate as being the
definitive one. For instance, a revoked certificate will have a self
signature and a revocation signature: the revsig is newer, so it governs.=


The human-friendly interface suppresses a lot of data that isn't
relevant (such as, e.g., signatures that aren't being considered). The
--with-colons interface is meant for machines to process and reveals a
lot more data.

This doesn't account for everything you're seeing (I don't think), but
it does account for a lot.


--------------mTaVdAvlCmSorTYib7YIvaWq--

--------------cdO4Or70xoDabBRzco6RtE5i
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature.asc"

-----BEGIN PGP SIGNATURE-----
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=l1tS
-----END PGP SIGNATURE-----

--------------cdO4Or70xoDabBRzco6RtE5i--


--===============4855739501532858295==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Gnupg-users mailing list
[email protected]
https://lists.gnupg.org/mailman/listinfo/gnupg-users

--===============4855739501532858295==--