Image Checksum not identical

Ask Fedora
, ,
1

Hello guys , today i wanted to take the Fedora distro for a spin & i,ve downloaded the Iso For Intel and AMD x86_64 systems , the top option , i thought let,s do the checksums aswell only to find they do not match .

i tried both files , the iso & it,s checksum files on a windows rig using the certutil -hashfile MD5 & SHA 56 commands .

i got this for the iso :

7a444a2e19012023bf0b015ae30135bafc5fd20f4f333310d42b118745093992

and this for the Checksum File :

bf5dca7186e3518ba90c3da270da36a8d9358bb10130200e8da1bdef97f1bf31

it,s bin a while since i did this perhaps i,m doing something incorrect , perhaps anyone has a tip ?

kind regards

2

Official Fedora 37 ISO download corrupted? - #2 by vgaetera

3

You should list the contents of the checksum file, for example the contents of Fedora-Workstation-38-1.6-x86_64-CHECKSUM is

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

# Fedora-Workstation-Live-x86_64-38-1.6.iso: 2099451904 bytes
SHA256 (Fedora-Workstation-Live-x86_64-38-1.6.iso) = 7a444a2e19012023bf0b015ae30135bafc5fd20f4f333310d42b118745093992
-----BEGIN PGP SIGNATURE-----
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=7dH0
-----END PGP SIGNATURE-----

Notice the line containing 7a444a2e19012023bf0b015ae30135bafc5fd20f4f333310d42b118745093992 and that matches the checksum you calculated for the iso file. The PGP stuff can be used to verify that the checksum file is the original as created by the Fedora.

1 Like