Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Auf jeden Fall zu empfehlen!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
aeb04c6c4715e02d7cabae1b4bf55ed3a265d1f34fcac4df101c8aa698f1a915
Signature (Ed25519, base64)
oFvQ5UF++augR/bg3j25xdXGKmySHtboOdkB3PlZl9vZFM/FJGI4DH3otB17cyKtwx/Heq5ROtm+DhJWt/EbCg==
Merkle root
3aa12e5b2bb49befac906908c9a841e9a421f12d0bee8acab9c1f906487adff2
Merkle path
["aeab3eabfe7c895596addebfa6792d4b69eff7f292d59e4ce1b48b747a54e3ae","0e7313b528ab4be5ef61334b19a3b1f6ec069c17e954cfcc80dfa0657349fa65","4055096d1907a974d4f94664d7c56ce9bd93fb96b884f1e09117733c7dc8f456","64f44a9742452191cb904c9821c2976e3d9ffd6bd1246a9e975663eebc2ce28f","2207ee5d995285116687c598233c97be7b3e3f81d5239450b64c471138f26a0e","9299d6fd84ff5bce7a12acd251ba7e44a7477982f2c13f61c89071d59eb61e33","98cf1a81f2c72869ee6374ef88ddd71fc5feb6d1d316b4f121eeecb6899ca507","3aa1180c6b653cc435b9b52501eab705fc144965a921deecb1ea8dcdc516cca3","db0549e414fd53e531fa355de1ba0849fae2e72739a9e98af3a55b174830f95e","09cda9f3cc0360fd34405fef10e7059816ad52042bdb137a0f4b61d1d1ee05c5","18b24b529fb7d23e278353bed0576e80b1fd06919d522608523550325b1d0c46","10dbf1356e5fe67074466b297926e35f3fcafd900eecfe706b534b826debf1d3","94cc16c314f23592e99cf662d1e0fe526acdcfb48a4e645cf6fa83038dd8bf75","2f00626bc88d01c042a52bec5a9d951d8fcf3187df280beda8f094e8085a220b","6099970369039e9ea9943621e6c4ddbe6cf64be652afb6debc70debb01455286"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514629481 · entry 108e9186e8c5677a8c32…
Expected log hash
d923130994e40329302180560c0ed5b43e4400136d037befc932b83910626f34 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787131980797","kind":"published-quote","locale":"de","page":"theme:acrobat/fit/de","quote":"Auf jeden Fall zu empfehlen!","rating":5,"review_date":"2025-02-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3aa12e5b2bb4…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.