Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“bin seit Jahren dabei”
Google Play · 5/5 · 2024-11-05

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3178600936

Proof data

Record hash (SHA-256): 9f60a0f3ffb5c4ac242e6b0e24846bfa8607dc4fff4be869f371ccecbf5c1cf4
Signature (Ed25519, base64): gcPo82CmBlHw5o6rLO0bgJyH+j99QkAGlARfgGzWqWqlsVsPKWJbN8BUbV1UQYr7cpCz9JlpaA7thcxbr59mCw==
Merkle root: eee462924587f8024361bc8d60043805cf5210f8bd2ef7667df06d093552f9e6
Merkle path: ["9f60e01b1b7f4cc292e1afd41ce41970f3ffd77460056e56fcbb2934bd1aa308","f6ea25287b358cf47a8d0613882622a3cf0e93cb50f9506690d6375fbcc23f1c","3f924cbb9b6a05e2b5e3c7474dd5627509513067cb902ffabedd6ce696338f09","3f2bb2b3c98d1a1adf8d2fb8135da7d0966bdbd342240c802a7cb75af1807272","6fd05a0a53725a234f750e5c01b7f3f4bb1323118b30a2c51b3241064801c5ff","86d324e955a8e0d200ef256ef4dac112b8289fe514caa5c7cddcada17f6380b6","2a12d86a56cc51903141ef927f35b8240e47533f613db330c34104d3df435d81","54e4f6b3184384129337d21fb689ad55c53d8bf8121bd3e3337e3a9e6c9272a1","2b5de971ceb236e1e5e57c649999bdc7761d765d78f96fb4dea6246ee47e4529","c913f73b75a3ab6843eab8623778a1d626a7dc439534ad5690d4bb871bd95e42","ff2b48a0e4499fba2f0e6147454654d31d5b9b7e7c59f047300283773bbd3f09","a881ef2a70af757470d8c26ade26209d4a9c636254361ebaffcdf8173cc1209b","7461bc2d06b1d6bef7145de580cb46d87ddc9fa66e098a96698a96372c033f50","f5776b4aea049b369136550a2eba5c5f94aeaa8e5ccb2b2ad336fc6ccf74ea7d","452f4fcbca19997a15e6a6869c50e026ff02cb90a6ef21da106ee0457e55941a"]
Anchored: 2026-10-10
Public log entry: search.sigstore.dev, log index 3178600936 · entry 108e9186e8c5677a6a91…
Expected log hash: f3dccf508afcb5e89d56dabc8c5aead85de215b1b896d057d463ea1c1bdb13a3 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791606586319","kind":"published-quote","locale":"de","page":"brand:atupri","quote":"bin seit Jahren dabei","rating":5,"review_date":"2024-11-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (eee462924587…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.