Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“App kann nichts mehr.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0ab6a299991f2355363a4e5847d5711efb768f04433e02d8d9a54acd380e3837
Signature (Ed25519, base64)
s4M33ucDbE+TKngFW3CGVNYZYPgHQDQWrwtJ0TAvQgD4pHQ/VWZTzRmxVSvR0c7LiLfeN123F9s4ei3mLrRfAA==
Merkle root
cc942239c46f13b1af6cdba0960a24a6cb62e7a7a462aae1e8126c0182dbffc3
Merkle path
["0ab4952cd9587ae93f318d9dfc22408bb7c75a95e57d652bc2d1f60a5d0d1ec0","d86252a32352a97b69304129ec868de0bb41cca8d7077809859e351bc95648b6","b664c4c96728234d4a7edd1d46925aa6889b4728b3b99ebc1bda08af9c02faee","4eb8ca5c2005ecd2b575cf9fe5d48317f9b71b4add751d2598f3448e8fcb072b","ee2e3b9504e7e1e8c5e500a536fa9cc34d659d9482e0bd61db2d6205c66b17bf","239be793b3afb6a78a0193edd249883587480b58f3000a1b85390e59128ca54a","ea6f129d34c213ab8c3a5e3c736a62bd99824acffd55a28c867351def9d02877","33aa031e92e51194a04fecd2c8fa0776752927ef3afcf8b5fc167608cd18ef88","61d6691c398157f5f825619d176e12b535eac632c25db2e8339567db5ae6a1bf","29cd417eeb527907adba3d77d4b0449d459f8c65ba8d0f4da38a95e5af5b5091","155deec12fe587e9d76545163e0a3ba9641db96dc9f375612c8edae799667237","ce148a613f994a846805895897725215688955ae601ca9f9f35f9ade9a27066c","29959b29034b6ed072468b5b39d5461625f307638700b9d566e817e6eed47120","f022ca67d84103ce2cdb199754ab60e49f2f04e17a257779049ad5591df59737","f25e568e6bd90a5619f6d6d975016290629a8afed06b80200730e4e12fb2d1bc"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2544236959 · entry 108e9186e8c5677a0341…
Expected log hash
c82e13ba2a716d66def44df55ff50c2e9db35da204570a7fd5650a8bc2702db2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787290890795","kind":"published-quote","locale":"en","page":"brand:sevdesk","quote":"App kann nichts mehr.","rating":1,"review_date":"2025-06-06","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc942239c46f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.