Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Sowas geht gar nicht!!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
63e0791ecc7e74aab9512266ba86155ed6cde7887b413ebc09d4e97436622447
Signature (Ed25519, base64)
0pbPGQsA40/40q9ANoci0OKlkTmFLNZ4IlIfwV1pj0vOblQVY2iZIXmJ2iB2JValhSVVvLhDrwUANk9au80HCA==
Merkle root
749703591848535a8600340214debbd99b61273e3bed402bec28b292f90ce9b6
Merkle path
["63e01561423491c29703582cb281d0d69e87d109617d69c8a32c20d7e3b44e68","6cf5919367c5d6e963b88428ebac28b7ea2ab1a05a11ff26f417bca88e71a47c","4bba35477018bf67cb04a967670ebb88755e352056166afa479cd1002605f091","e550f51db72f3bb19ad21217806b97e85c087bc2c5e3cbb3c6cc4eb92a9e5a3d","134746991c3627d69cd9517003426e514c05e83638452122864dc88d0b45ef5d","0a967e891a12ab667285e76a29ef9569da9837dfd869d9463ec3b11dd0d26550","26089820626aeae201de3ece52a84ff1924e95f346b79ef856187444fc92f9f3","1c8cc90541082d4af6bbca52b9c954cb16bd3442380eb273126007797feb22af","1a24586693cf8dd886c5aeeb344f091c1849f8946b0706fbd2bf54acfdecd8b9","f96a20b07e8d25f3685081e075da9f523da0bd165e347e159a76e72d86981f3e","3f97b00a24a7138b54d0f198bffc002b268c9474918f99ac9c3076551ee51f78","cd043ff06bf9c567c5552fbc40fc5eb9fba5cfec67ecf73cfebd0a633cb9214c","d0a145fdcc79a1039124c214c6d7364b7312550014eee4a8d0cd6c39ac03c378","0e5993cd09976fe1433892fa8ab65a03ba04fe977e193e49bb79ca2557fb61c7","bc5d1d560a30e83fe0f1b6a9452dc46dc135b1a7f73575ec3aa5d459bb76fc8b"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514602687 · entry 108e9186e8c5677ac525…
Expected log hash
e53e7f935eb508100ef1046b60c784e0bda15dd54afae176c275a97cf1f64052 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787131269839","kind":"published-quote","locale":"de","page":"theme:sevdesk/returns/de","quote":"Sowas geht gar nicht!!","rating":1,"review_date":"2025-07-20","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (749703591848…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.