Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“App kann nichts mehr.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
12c204d66c6c20400397c1dda89b82f6d8d76d2db9c95b232f832a5e9b1d0601
Signature (Ed25519, base64)
YX0eFoMmMDPbKvGXog46O2wDYMT/UC8W0iPma9EVfSNM3h8Q3YImNtIH2BanQKca/NHYOhLZ1+h45iIeg8WhAg==
Merkle root
d4c4aaf139801abe64089c6a646a11881b578559d9cb7d88d2fc9332bf4b830b
Merkle path
["12c4035213185828e726a7cdb0dd2894f8c0118d2038866e051483265a86f168","7fabcd4e35e74200e4b4c4dd69b30176b5f9a8c1aa82ab75b61991dee7f510c7","bfd28d91ea5c7e7e45cb0273cfb13cbdc91b961d6a4d94df0d06c8dfc91075d5","da43e4b6a49837467a6f62928691da679f9567d7d7fef09e9f5065132a463f93","3d8734b01ce6d0865620b09e4c068b835bf1e991dafcd57423a69f29cab83d4d","c1ca54cb2eb7ba7c0809b052448951462cf66749dc46840f9238d88114a60cfd","b323f03c9b79256e4d3224d3f4111462d6666e271eeeb9e723a229e0e84b61e3","4151979f9fabb601716c452d2dbeaddf110b2bdaa7cbbe0b4041a09586610ca8","7200fb040d16a24a71d536a92d5610a8cd88682e70d131774831e27cb0b48b7c","d108527b61af7b939721814263525e1f662010f84e1312fe201583e007a245c9","612d08b8d05702daec4d8791a8c0f8711da13b9e0aab194f6280cb89a8db2aef","34219eeded0fbdad71a4c54612fcdf090ca93e67f7f8e7798421a503a9d4cdfb","6100b8f7cb9a0ad1a2de57d39552d426d438448f64577a5ca4cb2472f553358d","ef527f45d797e2d831211fa20aa17755e8de8cd626bcb27abeeea7640d159dbe","9b3fe954f7b51d7ce6fa763f00e1815ec4c70f892ca128b9deb83a2e107b9fb2"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2683384390 · entry 108e9186e8c5677ab9ad…
Expected log hash
911a6ed7ed419f928c9567229b2f9168f943e91a3951514581f7a3ba93db232b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788324112523","kind":"published-quote","locale":"en","page":"brand:sevdesk","quote":"App kann nichts mehr.","rating":1,"review_date":"2025-06-06","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d4c4aaf13980…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.