Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“die App für mich unbrauchbar.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3e06fb51c0acadfbde2e0fbe4651f0969ceb04c7e1d0013c505a0e8e69d4b7d3
Signature (Ed25519, base64)
HM1ad8degMQVEpnaqB+gYnob5l5MJ4A6PaZefILkXb/gi4pSbd30/1of270b5OtaWIrNtwzg6iuZPY9SYZzJBA==
Merkle root
cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path
["3df178fa843bc61bc22a7a2ae5900ec985687e5a9927bddcf44b0a48c9b7e486","992e8fe00ad93edd31c5a4ae7bb6ebd5fec37535923a89bc8151a5ea67b7f817","d31c37ea757c921444487ac941d1661152e237b93eeed103442f7898b98f117c","b4287d0bed0637e6bf9718b90f25c188d2f092a43af9be717d49cdf753f882a0","84fee9b03813ce0a19afc084198025216274cfa0b227cfe1f8005508600f09c6","b4cd6962315f5a4e0150dbdeda5350aab4f2840aad53339a94ce21d3bc7a46a4","d09e78d2a93e1ce47e9390606b253f36b5b795a47a57c546411f6c8e062276d2","a7947f4575bb3293c99e83ef93a4ee83cbc8bf330c596dfc7775e333693a2506","c578e5de5e3ee00ab0767dfe080eb8eb3bd56178007fc6dfadb339277d85f094","f280a5fe49fc9c2471c75eaa4e3b2db9f0aa8a8a9d359495b12e5352573f86bb","4c2eff27b15b0754c00c575acfce9a1b9055d695a99129dda90601f430687bbc","e1fa6f392433e3742115b528fbb62d17c8e73f75e679923586644340f2657a0d","78c0401d7b513e155708f2181665b03a093a6cddbc8233872a0fe76421b285c1","806b2b46dda360b28a8a38da683f56d42f23ab9c4a7b2fa07453f271a33f5ff0","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash
d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787288037224","kind":"published-quote","locale":"de","page":"product:sevdesk/kostenlose-tools/de","quote":"die App für mich unbrauchbar.","rating":1,"review_date":"2025-09-17","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.