Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Warum nicht 1 Paket und 1x Versandkosten?”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
14d6da787a82d0f151efc0228d3f329e5e385e1885e4bd1a556f237c51160e47
Signature (Ed25519, base64)
QGk7KQ7+5WiF5nHInxVIgGL1v8rGXAfVuzgUD1UTiY7YV3zlz9R+DWNfjycJyudO617XzYkCxuZl8yjsAeB4DQ==
Merkle root
924dd80483b600ba21e68955fc2650c54fb1b237aa7e11c32fb1b306f6f4bddc
Merkle path
["14d6885cfca7af107179b6ab4a9c4f7ea6102cf97a5ecfaa73a99079bc84af4f","36b6b6245b33435d9d4ed034b6333af000d2ca278c22b94d92aafa29906dbb72","61e99598ef6b3aa176db1d26a9fdf7ab406f7b3ca48249eaefb50f19d4d4fb81","760491760a6bcd532a83fa231c8e47a1913b77ede37f3f68b330dbaae496c633","70d36fceaf54dfd9463611d77cbfad2b5b425620dcd4b8a24dcfb745a9951b35","1d4cbc4f2cd1f5ffce49881c16a2b0b976a8ab81e1d4cc49e3f21c9d412a3eee","5ebffe74d610a9f91568bc8c688f961bd3dd836352bb4e37a2c85e6ed8a8756b","d1c3f6e02527b78e98fd241636205e18c5e04478615ed9c65ef37872668356a5","4bbe1a7cefeaad635c2e56460d7df6559ce67a6ebfbf559bc831d70f0d104b21","e479b9230d87604d95f554694cba76bd398f27bebde9c983501b98eef28e8bee","b4528eaa49de736ae16da8a3f1ec1d5c0da5a83b05b5defa691d745bab65ec53","17a90155f01179dab01e079301b882fb39ae1bc280f8447e386802513db5c2c9","b2c0dcf6106a1f67377e203fafd26ae03d71b242c90ac43af4118fe6d142f3e1","6c47dc57ef64520d11e9e14ccc06f9275f37345b3c22731ef888f0abb3d98fe4"]
Anchored
2026-08-16
Public log entry
search.sigstore.dev, log index 2483017207 · entry 108e9186e8c5677a82b4…
Expected log hash
4b816132046950ac556210cc5233cd7ede4cb3c0c86d542780c32b53f564272a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786827975256","kind":"published-quote","locale":"de","page":"subtheme:ifolor/delivery/versandkosten/de","quote":"Warum nicht 1 Paket und 1x Versandkosten?","rating":4,"review_date":"2025-10-24","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X309A43086E7145E358EE1687E9DF7162.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (924dd80483b6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.