Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the web page is nice”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
660ba84e2e0f553e67c181ad127615fb86dc4d6461afa0adac763d6155a057da
Signature (Ed25519, base64)
p7/hAgEz2PVG9Z4+HX7RHd0omGARmViM2a9KYS2WlAsful3NAuFZqzIZmMT39QoSRv1a7YL0bZn1U6hlnrVzBg==
Merkle root
aacc11945f125ee3fcdef86ba030016c440bcc608f4e51f0ffffdb4cdc5e9321
Merkle path
["660bcb92117e0eeb45bfffb66da1b4e3ccfc5683c59dbf2c5d2b43f195250561","bb51d79618d88c448657e92d1604e0dd74c72d23db6e70b174fc7b8a93a6b0b1","3b4f2d9d5093e2a628c74c2b24fdaa485e0f7ccfdf9f743b7f18797e4e2ceec8","e79d8537faec606dce554612df8c06b9d9292947608c1754489b890bed1d166d","714b7ea8bd2d00a07ef59cab0f2f971f4a1203c34fa122ebc441b5bb344c2d02","6f4a2b1f4ecfadd4109612c6639a346c3d1f1be015f75c8b3a1b06bb1dce27f7","a4ace00576700d593a5a52cff19a83445aeff348b219f13bf8f379486744ce39","5d6b0c384f11f1993c8231019bf33435f9d2bb2a833b5106be0df0b5e594ab59","dab2e89fc4ae2592f48ea1c228714f277c74c2da5c15fb6723b603c29c42a4d5","590b75a206d93de9a03dadcd24e5524db77b67bf901908a5f2523c3b2193a1b6","02a5ea4f3197332385fe41072b523becd1651e68a5ab126f089fa99ed22d0ad9","10417bf8400d993dc5bc51fcb3c27f6a0c34b723944b9a3d537122bb9e0d2970","a67383a47457a5cf1d5e37868e4ed4249ae6b4ada373e7ec00eea3b30391affe","b1c6c1169310bc9b3706487a8b54e13d2c5256c24253b48b4df6440bd230af21","2309962142b16600f7fc4d57273f3042f382acb91be89aac7f00112f61b58f1d"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543547848 · entry 108e9186e8c5677a921a…
Expected log hash
bb93f13ee7a4a636e28586b842e19662b148eb18166a89b3ae7d189bb8e81689 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787286345433","kind":"published-quote","locale":"en","page":"theme:meteoblue/ordering/en","quote":"the web page is nice","rating":4,"review_date":"2026-08-05","source":"Apple App Store","source_url":"https://apps.apple.com/co/app/id994459137?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (aacc11945f12…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.