Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Perfectly packaged”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0d6f1212a7b73c42e78e947423133c4ccb6263dc7974347e565530e967d1454c
Signature (Ed25519, base64)
6c5CgS9RnRNhUY+FypZPy2tMza6EyQxQQBzaSWVzdza9eRAXPshm7shilR1Jk+SuGIn3D70fK5owWZqct7htDg==
Merkle root
49d75a7972dad7fc75a734f764cdbbaa106268e1ea0f657aa8c6fd89424d4b2f
Merkle path
["0d6ed299a6b928295af5d4739b4bbd79bd00344b70ff6886403588c6e3ca380c","d6cf75c8d4923d43f88d308b92ff1059e8711558135868dfd6ad8e8ed4dc99c0","b476886f04bc1d437f6701b6e5dca5d276295a9bc1abbc8fc0e3b6a9d6aa1e2c","ee362b852673238ef15363cc71ae542c92faa27850a581d415f3a47146b7826b","3c7c67c25e9252d736abb402d7a48a0a9eccb4bd3fe22aa1b9b491f273effb30","48124a7cc382b1445cd6aada2b7c372ed93db4795212ba7ae5397b6af40af53c","f9c9bcd755124673ad34c1e6f5bad3da5e2b5ff442f4f0ad7f680b553c02e03d","8846385255db42c6e94aaa661aef7b68e888ffdbaf1e5fd411b8b18ba5fb8bb9","6959a7135d2a983f80e88e4cb6d836c0154b55e044a61ac4c8c40dcba21d0b1f","f40006d9b683b4f1aed07f5b150c247dd4561bf4c8a36645ef7ac705820924da","971a4137578717d4cf8b796fe2df4bcf346932fbf526bf7734db31a4e757bff2","9ad764adb090606813af8d981e25ae04fb555663f4dd61ecaf358a138629116f","f930e87d5846215d9d33cbd2f684fd0788c4b25eadd845d1575c3bc708e059cc","79d6c858c8d60d7d4fdeb98d50012f464859bd3437e8887f9a62b641664e5493","75fe8695ca709a884269711b05fbdac24cc3f8930abb9087723ce2c8cfa8fe2d"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2681429093 · entry 108e9186e8c5677a81cf…
Expected log hash
89c17d1b707f92667072f2c7dc2ae2ebf8b7354f0952f06862b4ec01440c148c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788303366831","kind":"published-quote","locale":"en","page":"theme:ifolor/packaging/en","quote":"Perfectly packaged","rating":5,"review_date":"2026-08-05","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X309A43086E7145E358EE1687E9DF7162.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (49d75a7972da…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.