Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“For over a year now, Sevdesk has been promising that the signature field for quotes is coming to the Android version.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
103bfc70c7e01d247404cd7834a688020b5850cb41b0fd4d7178e4f5cc73ebfd
Signature (Ed25519, base64)
Q7o3so+aXGNOcD/e+gPTfKHP9m7qN6l/OokRrH7tZQ6ABQzp9KKerwep3bY2TlWlKIrVuMVEUGdZMpG97lqHDQ==
Merkle root
fbbe54686ff192def9dac89bdc2006ad47a493d00db3b3a9ff43e3b123308061
Merkle path
["103c86f1687f90263941b830fcc99edd3fcb2fe3afe645602d8cfa1633c0fcf4","6da8a31c658d6d09bc9f3e9a2196b17b3888de40b5cc9c85e1fa043a849d90c5","c28258963c9a5d242394962b4ced6e78590ef35e7daf03d1454196e7507d8f8e","96ffb32862335dcfae041e476fd7e47ae2bf8a43511e7ca3b157a66584403a00","19975692996ad12690471beb296b4eaf760c23f2d3f7a670fc338d50c0ba5c8d","a7d92a03092b63d3854f17ccb5b7d84ca32db7da7591d267e7783993dee3debf","22de82d564ccd0d28aff5223468df84865a1484fc89cb4b74d959ef627626f3b","d3b3494f3a78a3c0e156a4df6a16f8eb155a15a2939bad91dc8c1a259c65d1a3","0ce4cbd13db590bfe2515f1cab46fe1fbbd2a839ca2fd60b7c8847386a3d2aea","263d470def7580ad6e06d5702530792cc2575c633bd36550cc310c9483f9dc0b","0e6f6371b58cf2500327a70b004c370117a0f78370f876c41c96de96ca6b9321","81209070664570597e8bf61666e34f9722287e281f0452904740719a0e227776","625eca1bb9e6a91dfa6035d766ca1bb6ab8a6b58b95ce694996f607f2e15cc42","924cd389915044788bccd2a79bfcfb29ab0fa44adbc43b1e7877ad3c03c87c9f","910ae6498c24b3e218a7772cda41516322afe32b5ccc8489f6bd972bc23cc14e"]
Anchored
2026-08-30
Public log entry
search.sigstore.dev, log index 2647504463 · entry 108e9186e8c5677ab12e…
Expected log hash
3bc4a58498687620ad93cc1fb735b54a6af64886697db4c643becfe466e70236 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788063157670","kind":"published-quote","locale":"en","page":"product:sevdesk/kostenlose-tools/en","quote":"For over a year now, Sevdesk has been promising that the signature field for quotes is coming to the Android version.","rating":1,"review_date":"2024-10-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fbbe54686ff1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.