Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“je n'ai toujours pas reçu mon colis, malgré un suivi qui indique qu'il a été "livré".”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
17457ccbee1cd1ac11b33f91c4150443082d507490c59c3e60863dc1a1d69a22
Signature (Ed25519, base64)
R3eZGvLgMCingovkewU2FekITmcS3IqzwRMHkXETvQJ6+/ITCH0o26PfA+EKUhDIw0KMnqaxFC23d6Sfsni1Dw==
Merkle root
23708832e8b82fb19ed546d32769e3b420c1d586f3597c57fbe21b38aa3d2967
Merkle path
["172d87550741491f54224fdd6c67f1c3d359066f2eb018ac4b4357ff7a617369","cd15290fd641e3f7da4f513ccd85a6e4aaf28978e41a5fcd89c285e5cb42bc3a","83a397afbbdc1ae9555233c52364ec926a5a3307192468447e97af6bf0152c41","2cd073317df368c01f5505e2de1b87b1ed62853dcec6921eb7708a3cf86e96b7","500c1ef23ecd0e9937f9ef374b9f6fc1f204b11ae1d4778ce695693ba2a4cb70","03e9c6ca571d63dd5d677e59603a4d3b9b3555444b8ee54bd60feeb9bd21c7fd","3b3e67afbfdad10bb44fb8db59832ad04c3c61adb7abd5a7b98ea600e646f7c1","460737bd12ae508ab3d6f4c30241b34aa90fbff826f4d3319a03a179ba5aa5aa","9e5cf819b5883f85ab899bc71c675ee999e497f01b0f056ed4ac62d9d4c9e693","8c2ff8769ee280b248acc357f3e12fd02542a70b21b133547c8c5bef2c25b069","393049a554a1bd35958c4b937a21e269505054b1c7ca00afd399834c900059e7","080030bf4f1a8adb576232d2d32e208964a15f9a0810e94412df45f74e9df82e","19beddbcf75bd4ec490e45017ad80ede4091fd11e1e67f64b06c0e49a1029e54","8f33faaa07ad5ea07efeb917f280edf1402ccf36ac9ce99ebbc19b8a3755ed98","15329b26f5dd0eec881ba05455c1331c6ef72dbe3b2411079c28929287675737"]
Anchored
2026-08-30
Public log entry
search.sigstore.dev, log index 2647607423 · entry 108e9186e8c5677a4592…
Expected log hash
0f6ee04fd6fddd2300fedff496e92d61a9d4696f180bee82b8a815cdce3bb3d6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788065315450","kind":"published-quote","locale":"fr","page":"theme:pixum/delivery/fr","quote":"je n'ai toujours pas reçu mon colis, malgré un suivi qui indique qu'il a été \"livré\".","rating":1,"review_date":"2025-01-09","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (23708832e8b8…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.