Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Kann mich leider in der App nicht einloggen”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1e17766649b10f921add28f58e902a1f1aa984051ef53193505a4cff09b2f398
Signature (Ed25519, base64)
GdNnrJYknyUykV85kuKbDKwPRa2bd2Ozr6i19HRfatYvmmv5z4zNDyLAh1xvZTefHzfun4F4fP+TyZ/tpLrzDA==
Merkle root
d172a7cf956e2b148257f1904430b57957f1397e7267d8861b84c949d8e35e40
Merkle path
["1e1120a868b2f5e356074dd741729b10236205b9a29cfc0002b198d7176976e3","f6880487650db885f0f3d2a5be23189e9519023e6e30cb3929bc2dc0f8d8bdb7","141edcd9a81a3cb0dfa5b3bf29405387f26035c50173e5c451ad2fdd18243da1","e6b6c3383dae1366cfcd0407827b8efaa818eb835761b787d7445ba286dba36c","d06eca62dbc2cbe9dd292738644924938b4fb87cbe1edc1ab2cdc982b4a3c154","f328cefc24543d2d1d4ea62ae879194f672e56aaddfcf871d779c0e50fbc5a89","622f7345890838d18aca0b00863fcb53070470f6016c6cd713594723cf99bb54","6beb5dc96daa322579f7c89c417847751de810343a5dab6ee1daac8667d1d2a1","bb4d04d27aa4fa5bcd80eada75be24d466145981842773e47e6a32cd9dd2f927","f25e1a1f6d70be2a56d1a40855a22e8c2b941ecd6953e45f1c48c7e76d5639b4","c798980621599a6372f294378782f5888d0619931f9506397ebd1a0d5d0dd8d2","94ae8e4f6adb62d3dedb0d45f6cb3bc7ee886f50c769e386c26dbcd96e444beb","ec9d22a60fb3373395242e0bee52cae203406eed591b174f096249c369d00f81","24b78eb17781ff82da235316ce22b13d8e2206e794b324b0ed78181b6c334313"]
Anchored
2026-08-13
Public log entry
search.sigstore.dev, log index 2445296928 · entry 108e9186e8c5677a0a62…
Expected log hash
c9abcace05ae14f54b0d99899537438e06fb4d27f22b95a0509613937d3e30c6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786588795034","kind":"published-quote","locale":"de","page":"theme:sevdesk/ordering/de","quote":"Kann mich leider in der App nicht einloggen","rating":1,"review_date":"2026-05-07","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d172a7cf956e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.