Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“L'application ne vaut rien, à mon avis.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
74ab953fa853a5d2ddb120120abd96d32e4e4efd8d8cbb7f02fb396e421495d7
Signature (Ed25519, base64)
0JlYOMzum/17S6A/jiFqcAoGIEmPof7o4zmuVBCg2C74TYaMC3oown1ZJ1+xdI5yYXjHl4icSecCDWeeihJ1CQ==
Merkle root
3ea09355a1b22a15fffcd33ac0d37e4039cee2896092e637dd8c4e7dfb5d507a
Merkle path
["74ac353a3d34e71ca516b259814c3ce3e5ca35544972f829d55abdbb192f72ef","ef27c3eb4731576dbabda3c2c82e7f15818dbef24d2e39efebbcd8a6a0914296","da1fc6c8e7b58bebea041a75d98c6d214b147b6a7950df595e512811970d6d81","a6ec204a125d0472425b7821abab2b600993555a68a321460e5a6e30ad1d9091","f098c5963af8db9051dd05741e34aa9a5f8e9752a5b4393aea4d6395e7248573","6c12d6837fdd713ecdcf49878c498fee55a7d6ed4b63f95b32e8cce8ed124ae8","4474349d954b26846ab3be7ba14cebd8e069a3d3441d33fa3bf42152a3384adc","40bbc5836656e230f7144bad909e55dd9018282ae953c2ab2ed82926fd1a7364","9fc6d3deaccebaf8e64dc0aed2d738896c988ecca8bb1e35d28e57f8711f8cd0","0645421cd3ed70b9783092dd73dd786c92070bc8407bd9de7dc4b17b6b1d49f2","cfb18ddab612a7d59b52d04ad166265eb2f8873f845be3933be85a5f51614dc6","4b61e0ec42d19f86b24664c45aeb415bcdc17f750f06fa8c661a8baaf980e7d3","0ead555428295332ed003e76021a0f41139c28278eb5ac0da90eb0f864c2f749","d8ed3a5c7d4cd902063782d2b816101a433fa513967f9352f92e3b3b0172862c","331ffac0f34e1f76cacd782a04285f7bacef5f5dffbd1f8163703fce9b22280d"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543978942 · entry 108e9186e8c5677ac836…
Expected log hash
69ff2d97383073bd392d75b79533a80cb25c69be55aee7dcb24b1acf4a379172 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787289230204","kind":"published-quote","locale":"fr","page":"theme:findependent/quality/fr","quote":"L'application ne vaut rien, à mon avis.","rating":1,"review_date":"2024-10-10","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1510962836?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3ea09355a1b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.