Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“geht aber nicht mehr..”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
72e7e9c50c57635fc3b455eab706593831b7a1831385850798bc15c2755632b1
Signature (Ed25519, base64)
IJX2nB+2PyMwbhUidQGPo0lxByPrYlo7ZflInFmv2zVNv9S1a4RfckDYEgHnlkz4on3C9ORxwNass7FuILjVBg==
Merkle root
0eabe705d05480191badde562bf975cad5c107b96758d59c47efce7f02d55f90
Merkle path
["72e461d60cf5762386a7ded8a280896fa7bdbef8f80335fee7c4ac5738294046","023051b44c25e3dd33893ea0a359c4c661df44fa687350c060c91b7e4a0ab5b9","4c1cc7ca7299b0e74408b1d3e90f686c91272d00ff951b81d96bc1ab5223b360","24b07f196041a0392ad0b9a79fcecfe7c9f42c4ac743e2c6cf55afecfd789c4a","045e4a31d3d1835e03d805c9029e5ab7036ffaef0e436105a0bdca368918d62c","96f53dd73e88f164a532afb50848a77f6f55b72ba70b3f1e08ca8672eb267368","0aa186a75efa014376645a57987c38fcccb337126bddeff7d2deb4026a2d92e0","c9595326e881e7f6150fbcdbc649bf5b300676b3bf57a3bea36a4816eb6c4bf9","16eb750fb1d9b5667fba44c62a6cbea08d638bb73a844186933711cb57ce0753","8278035ecf5fafbd50171b262e09c6724d22ec7fb204edfb2140d7320e45f81e","3a3039f669c79fbeaacc0caaa5124c6a7114794b41cd46d6c4980dcb9c1b62c1","8a403b716561cc07d11d9cbec85f93018a61d162ea471029596197a0e1251ecc","05681ee1c24ddb2c2974b8f09b67bdf0f585a1101ecc93c336a755ba8369addf","2e4cbc8181996227b6c5ce6cb00a4128780f0a2cf8618660b840716e64b4286b"]
Anchored
2026-10-12
Public log entry
search.sigstore.dev, log index 3221102617 · entry 108e9186e8c5677a7ec1…
Expected log hash
701a9a476cb781c93a6209c8572d258b6cbf70f6f15d478bab1da1537af9506b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791779915538","kind":"published-quote","locale":"de","page":"brand:atupri","quote":"geht aber nicht mehr..","rating":1,"review_date":"2026-05-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0eabe705d054…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.