Best way to get fingerprint programatically

Werner Koch wk at
Wed Dec 18 10:32:43 CET 2019

On Wed, 18 Dec 2019 08:19, john doe said:

> In other words, why '--quick-set-expire' requires a fingerprint and does
> not accept a <USER-ID>.

Only the fingerprint is a unique identifier for the keyblock (aka
certificate, public key).  Allowing a User-id would require extra code
in gpg and by the caller to either ask back or to fail if there is an

The  -F:::::: is an interesting hack but Andrew's or my variant works
with all AWK implementations:

   awk -F: '$1=="fpr" {print $10}' | head -1



Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <>

More information about the Gnupg-users mailing list