Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“App funktioniert nicht”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
333e972c6c594ab820d1ad5b3ae3746453727babc029a4696f3a6a79a174cd51
Signature (Ed25519, base64)
kemYv0Z+1rSRiZgnsLhGCVyPPKGllIgh31lugWJ/8Q5LzFA4+cmmWbTH0gQNH9TvG/TbjD3WmWU1L4uq/KMlBw==
Merkle root
6189a42bfe294c4034f316d047a716a5efecb511b8dbe64c4f7f543872c9bcee
Merkle path
["332f8061f7ff0c89420baf6d35668a0b64fae0a3da95ca5f6afbc30f7d482eff","9e13739d767a52943770c5fc08c390c991774887e21b5458a36ced189214c4c1","35e2779f556e8dc7c169b91082022c0990d6df850922f5d3fa2dc822f101033e","6c3f9df61bf493bb591f241b332867a923285fb3b316309830a25bf1519bebca","56c8dc8877d9726c6e009332b2188cdea509f5fdae66fa3699421a67fa1e4f50","f7d8298229938d2751512604eb75d0ec9a37300d646e3d3c68206992b83851bd","550b12a962ae4b2baeb5795229f165ae5be8dece36f2dc5c76b71c8999d3f601","4073f6901e64bc487b0b824065bfe63763aa4b9c32a2fd844fdaafc793a1f055","9ae7e022413b409efda16509ceaed39187038c97999c66850be725acf774bd58","b2a3e2440bd8fae50959383b1cd4020f7a5198092801b1c1c648428a005e8fda","7a17bad61fc5c17ab9476d28661a336eec53be45db7c83e1db8c0eee77a6f224","ab468bb504ef4409473e4d4c44779111bacbf52686b66d58b2abf584e628beb3","54715b684a7aa1790a643866cf5843a2432dcdea9093898d94c331b19a70418e","f786ac0debae9f349ddff34e280cc8a64ab579a73e0a3d3745d84df0612234b6","e36acd56aebd26af88e4e41e8d5bc2a1389f049dd914bc2c3da8d68ac2fede4b"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514188040 · entry 108e9186e8c5677ac9bd…
Expected log hash
b0fc1d11450dfeabf778635bd8a8264987fbb7e682331541ce1f5d7507d4e862 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787125125654","kind":"published-quote","locale":"de","page":"product:sevdesk/e-rechnung-software/de","quote":"App funktioniert nicht","rating":1,"review_date":"2026-03-12","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6189a42bfe29…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.