Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“sinon pour le reste c'est une application très utile”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2e18ce7d199a757fc701c619e7d874124fa91a1fb6e87d97353caa9454216c20
Signature (Ed25519, base64)
lCxCatm+HumSatp5/iqcKfwnWZ3sxuN6q4O4iYP/LMLWnr0muDXkEUWp/wblSM9AulAS/3IkeytnRThWKs4PDg==
Merkle root
23708832e8b82fb19ed546d32769e3b420c1d586f3597c57fbe21b38aa3d2967
Merkle path
["2e18c0812b0f1c45244584fda5c74a5aca8d7cbb2ec7e7d0c3b062a2df87095b","132d6b00c551e7b2f1426a33a16a5add2a4efc2a47935b88c133cfa1d7b163cc","aa2895d93fb765144feb22f0ee6d6c63f40b1681c5267dffbc791db88eb36878","3cec117fc9ec784a723598074e37e845bf2b5c47dae58416e3137b27ad36b994","0ecf69f7070f4c3c576efe851696722e45053663410be4340669794a81b1b0cb","993e2ef3dd63ccb161b9d1d03ec776675352f3ed59b380c6f3e6342e41d48fd0","d79729681c814140244b6d8b7aa9f7170aa8e82244b0da3bf6d3f17ad02298e0","51ab74f23ba27d8a297b9998c54785f7a33246f44495138bc9b9e44adf76d64c","aef09f235d68d9d39e92253db6b32d734be8b4305a4159ecca1c7644f6a63524","4bed2b09e3b0cfa3aa7e42f52ee43e1fb809e09aa9880e504571cd0df4c04c06","f5d01687e3f8905ca1beacf5805d3c2b068b5a44377dd87ffbc6a9bf43734d5d","886c6c8b44eb8b5f17f3990b9eca4215e7ecbe3bce4e5df2d7159fca45f4d4f2","19beddbcf75bd4ec490e45017ad80ede4091fd11e1e67f64b06c0e49a1029e54","8f33faaa07ad5ea07efeb917f280edf1402ccf36ac9ce99ebbc19b8a3755ed98","15329b26f5dd0eec881ba05455c1331c6ef72dbe3b2411079c28929287675737"]
Anchored
2026-08-30
Public log entry
search.sigstore.dev, log index 2647607423 · entry 108e9186e8c5677a4592…
Expected log hash
0f6ee04fd6fddd2300fedff496e92d61a9d4696f180bee82b8a815cdce3bb3d6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788065315450","kind":"published-quote","locale":"fr","page":"brand:signeasy","quote":"sinon pour le reste c'est une application très utile","rating":3,"review_date":"2026-03-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.glykka.easysign","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (23708832e8b8…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.