Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Unfortunately, the delivery took a bit longer”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0441b8dcf9d4f09e2dbb85c02fce737fc15f5e922cc01f218bfdfae754d76097
Signature (Ed25519, base64)
ORJR5OMtJKyq8sAcOVbt+9k12amstHJb3ujzJjgG8s1WYsN4AJ8lZbczI3I+3jLKTjtfA2TUQ08HiJwjSTWIBA==
Merkle root
1128c1e3e4534f30e1f8c2f8fc1f60db99ca4dd81f25405dfff62ff1f39e22a6
Merkle path
["0441c160b9f311b704ed8cc8ff40730afc87cb23ab79700da1de9f2e1e7b8205","157cb50f01a199131e4c892b980224b7baf5165d646e414a6cf6abdfafbc68e2","0ba0210cf0c8178a069cd26f17bad616c004e982c31b6aee135382a53d437892","c09a93bbd4d470f8bcc48714a0cc668e518bc6fe1e66ae0abd2dea739b910a2b","c89b885946bf94fbab2d17989287f272b46d9189b6d85278f42dd11da426978c","46f58d374da55fcde4017a59429f2e9f3c4221233698819f2b3d46ccc1f535ce","04ed924a48c07d36abf03fb13d9cd3f0e56803dada5887761b8996af764291c7","3c5e2b65f32c6d85ec955bcb9c16cc05bf5b3067d6a24c29b0a06391514f2188","d16e8363281a5b5d555402f9dc64620e5e7c1860b01c8639c7ff6a231588dafe","442e52d7e485838f92f309f9aa208a9a2324dcd1a73e80e311d9e54bd16d6575","5ea9496e8cfeb8b81ad7d4b9eb86263db05464540b11c9362068eaa7c710251d","61b4a662f53cd70a1d757ee9bc56bb78b4fd6673936037a47cf8f48b7bb4419f","9428e24b047bb9d4ac05b5ab6de36e249e544865747a9fa357ea862bb3060151","c4a4d8b2a4d8c0bfbebb4916fd7e139c5aa71a08248affd318e33dfcfb90fbec","b39bfa02188a075f3ffabe31b61efbaa34ef7a32306f491e668efcd33d84ef4b"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121353835 · entry 108e9186e8c5677a938c…
Expected log hash
3980f7151edd7b0249ea159b11c34712cba10d59cd8ffa603af676e538f81cfd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791338675665","kind":"published-quote","locale":"en","page":"brand:ifolor","quote":"Unfortunately, the delivery took a bit longer","rating":4,"review_date":"2025-12-10","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_X19B6DADABCABC507D6D52C818325E42D.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1128c1e3e453…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.