Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They allow me a discreet one-time refund for my fake iPhone case.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
b0d2a360ed54c4872582d9835a2a742740b059dace20083d9d494cf06e77c543
Signature (Ed25519, base64)
7Hcp8Hz1FnRDonl7kON3EGcq8qjXFBQj9Nq77bFYFGNw8AxL8LTVd5pQ1N9mUJd7MwUiX5GoWtEaEGSgFD79BA==
Merkle root
172a3e0b3c9f8b02f52318e01ba6beb899404e00e91c15eebc4dea38467e1404
Merkle path
["b0d69dfbd1aa0b104f549ab407cb0c0f440185ba70a5f5f810c68433f342c47f","aa7940c0bd6d07803926dfcf4c65f16adbe1ee4a88e201c992aa0ac198b72deb","7d6129367812ea384eacb402d3097029ba5060371adbd602ddf73aed5c932580","5e368415fc91faf542fcdd8e0276d8ee22bf99d3dcf536bc09c748c23b893456","aa660909c454a66f3f265730340501d83db39b932b0a671c1aa730a185e193f0","31d7014a962a72ed14722d5dfa0c63a90b913ed31da161feeed96feda70783cc","6629f0d920c7fde94d909d4ddec2f21e3a4e48e10aac34e8ad4cf15764971933","f1823c123ba20dd30ad0c7eb7ec1fcf0613b516de429859e20a086498a277c90","470637de33200bc9d542f11affde456773bf1ada8b0b51732902b9f4b75f6b67","a48786c42884b6966e5f0e8ac47e8313aaef8d96383096bf8e68638d2673b75c","9b8e2669377840deed89240962085ad9f98d74fa7269a3ae19481fe6e36e9d57","0248523d9f057d9cd5deb364f400d33e380f40b1b846660456f0662d10dab3a4","c4678a47826f231adc1d15c864209ccfc1d346368f44c1aad2950bc46df9bf89","cf4d3887edb33be9d7a9e64011338d9abc8444e06d1f5332550f7686a2c1727d","7731d0ded4f51d151ea3e84474d1e27a6279e8756420c93cf5fec0abf7f11add"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543025731 · entry 108e9186e8c5677a8971…
Expected log hash
19ecbe4a66d8adbd7c6057dbf6ed9be73485c248dba1e0c595279a908b3e8bea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787283443958","kind":"published-quote","locale":"en","page":"theme:pixum/returns/en","quote":"They allow me a discreet one-time refund for my fake iPhone case.","rating":5,"review_date":"2025-08-12","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (172a3e0b3c9f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.