Page History

...

To generate checksums, navigate to the directory containing the .zip file and run the CertUtil command.  for SHA512, SHA1, and MD5 hashes: The default gives you the SHA1 hash:checksum. Append SHA512 and MD5, as shown below, to generate those checksums.

CertUtil -hashfile 'apache-taverna-parent-2-incubating-source-release.zip'

...

CertUtil -hashfile 'apache-taverna-parent-2-incubating-source-release.zip' SHA512
...
What's the best way to compare the checksums from the email and the .md5 and .sha1 files?
 MD5 and SHA Checksum Utility
When you double-click the .exe, a window opens (see below). Browse to the release candidate .zip file, and the checksums will be displayed. Use the checkboxes to choose which checksums you want to see. You can copy individual checksums, or use the Copy All button. At the bottom of the window, you can paste a checksum (e.g., either from the VOTE email or from the downloaded .md5 or .sha1 files) and the utility will verify the hash is the same as that from the .zip file.
Image Added

1b Check that PGP signature is valid
...