Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“unklare knformationen”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
36c90c341620acf51b1c7199df371f447f63ac92d9127274e9855374ba4f87d0
Signature (Ed25519, base64)
l0JrP0uPx+PL6o5qEFiuzN7c+qebqOYC7KqdVGwObXDZyidjxqOMtfiMUOIqp0VrNF+pYZvfP+6mtinqyHbTCQ==
Merkle root
49d75a7972dad7fc75a734f764cdbbaa106268e1ea0f657aa8c6fd89424d4b2f
Merkle path
["36c9f9fa9993d77b5bde748000c89a043d966632d814d7e3c0c9db821f2b8734","70301095cb32677944106dd07c267e06c045b5c4a0c5e33bdfa306d02da0e297","fca8eaee815f9745f3b07418040f49d7e47e04b91a3c460d4ee2149d7a94cf04","ec3eb562e2757920fc541492df463eb953908d74f3a91db092ca39eaeef5cd92","2fb979060f3330730e9c476fac99d8a4cb5aaf37896718e3844cc502e19523fd","46d032b96e5d58425811761091acd72ad01105fc2e34d55d49a8ae378800b782","0ee6fdc508fd82a5ec1f1bc9a97daa72cb0bc201fe2e116ab2ea56db5e3cbb5d","bc129c7e473f96e028cd800b9c28b8a1ac4cb0b7611a4f966eafff6f2e677527","cbd50f35c205d8f43c0f1649e496b57c1640af3a50fed4f567b508d80bfb04fa","0e82c4b9ecc5ae09f3d663400c6ee935d2f81748937bd7fd4e46869abcb6dff9","b092dd4b9b631e222ea8486799dbf2846419a27aae0a65594701f78247620fba","72a22bd2ca93cceb3bb5a13ec1f855e5d46d6aeaad1e5af4b544ef5868c933f0","bcabd56f510a7330415ce228495655124a544a20b18b19f33b0238155d90c3d9","79d6c858c8d60d7d4fdeb98d50012f464859bd3437e8887f9a62b641664e5493","75fe8695ca709a884269711b05fbdac24cc3f8930abb9087723ce2c8cfa8fe2d"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2681429093 · entry 108e9186e8c5677a81cf…
Expected log hash
89c17d1b707f92667072f2c7dc2ae2ebf8b7354f0952f06862b4ec01440c148c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788303366831","kind":"published-quote","locale":"de","page":"brand:salt","quote":"unklare knformationen","rating":2,"review_date":"2026-08-25","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id969561743?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (49d75a7972da…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.