Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I was asked to rate the item after 10 days, even though I hadn't received it yet.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
062ac339c16b0ff6cd303ab50ffb2a47d135e0313b68681df41723053eb95c5d
Signature (Ed25519, base64)
AVsQxH4f02iWtWiDKNXglu4htTNuK4R0YO4sgSdOBDZDMf0zJoOpcIwP94TaUC4FEFJ578MP2CzSmmLVxI3pCw==
Merkle root
e6ac019704b226508e994cc0855a4d192d5ca56f36bf79e20dc9e3368a99cf1c
Merkle path
["06235c4cbddeb9828523b5e194de2d4e2487eca1b199a20e79ffbe6b9c68e878","5e3d3797c9bdcb262e6a6273e943f02d0f4d81ff71f89766d22243548dd693cb","5c87518f097adae10181b2e1a7a416295fd574c910aa8865443be71cf92c0982","f963e5b2e1dd806e8b60915f2860140522c2bcc1258436aa5084113a700780f3","59171b1dfd32b4ac66e60d7bcd5f22225e3c4a648cd0dcaa8cb559bbe392e81a","7e83c82545f69daf2e23d42a1676b13337eb5fcff34e15f62361ff8a252a6d8c","387139e24036e0e01980a9dcdc1b3efae999326b6414e4d2ae3e01ae099d4ce8","3bc6749aa2ba59e74f0fc03637e12eb077690c05f08c6a28eb02c1a4e4d4934f","95b5fc886adf76b72ac5e081f98d2e47ec9617eb82f031ebc98fbd98c57c8882","6651c9cffae29657c2783a52ad745af90d49949609c2047204d49c67f0076cfc","e6cc2e980815e5085e45d94597d214cb8a671eee8f8d8bc713278ad1394457d0","76aa14c6b140f882f5a6ca82e1bd3d30ada81e6f9ebf68b6cb689ed74e97d2de","af32e6ce7a9c3f92995c628e9a34041f7ca98856143c57e4fbb6f9b1d2e86f88","300daef4aa548e8c10fcf4706d8cd6c134a74d44a2fedd09c528770268883f87","55037d90ebc6f8ee5750b678c0269386792b0a1b293edb3e029a7c8e378291ff"]
Anchored
2026-08-29
Public log entry
search.sigstore.dev, log index 2631716425 · entry 108e9186e8c5677a0f4e…
Expected log hash
45ebfa784ea01d364c463997b417af34e35327c4187ff9e9782aece8c325deea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787968874252","kind":"published-quote","locale":"en","page":"theme:ifolor/ordering/en","quote":"I was asked to rate the item after 10 days, even though I hadn't received it yet.","rating":2,"review_date":"2026-07-18","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_X19B6DADABCABC507D6D52C818325E42D.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e6ac019704b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.