Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I love this app.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
cf89ae9a9d9087954611c73f359b7ab5367e82780e4745edfac349316674afce
Signature (Ed25519, base64)
O+ivz96Gz3PIVtsQK2ASd82elPA0Ct7NBILI6scFeDQgCIEYlOE5P6na+W9ZuNPswYz2VfmPmmHcBDJr338NBw==
Merkle root
e61c2598d4d03770603e24740bcc427581e87bcbeea2e56dc34fd81a9f496465
Merkle path
["cf7e81dce85f95a2fb74e2ec906fc9b1fde17682a7efd2f64652845a33edb6cb","f56b74820dd91fa584ae081ca3b255cbaa3cc281d966e755d78e3f6309ac10f7","2e849d5a1ca81a4a59e0a5af5f235f8272c530bc6724a3bc4b5a7c51e92349a6","08bfe2c25d3dfcef134c31a7e5b3c92ae597d4309e67f151c411bc153c3cbe98","051986f2f73641eaeb91199d134bd64ba5b556510ebca2198e2635db7a77167f","9876a896642cefb61ef360479e1bf777f0f95e43f19587df2dc3d993806f5b56","3a50d57a78b2ef147cbc53a6523909bdd9a0d8448cb55a05696f16ee763f60b7","8386d768816bb6a5706539f8f5df682e71a03acc9d1b860522570cdaa175377d","79b7c147b7073ee864a7d9c2d8cf63ee5aafb409a60ff815c8b58b8580de20bb","9e098056bdde7bc81b6b8f30dff1ca0f444fc46278675f6172ed6eba40f02d06","096ea17384606cf188760db507f05671ce30da645bbdf6360fe161bcd7203a47","0225b21ad83e6f01f31a43cac3e0ddf56fb73e5b95870383424cd896c25d630c","0d7e70561a00ec35a60125840d96312d7037145a8f0a53ce6bbfefb12e0a091e","178354b4aab4af523ebcb0558b8ed8c1db0fa0f77d72042a3c28213d8a82b6d1"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515345787 · entry 108e9186e8c5677a749c…
Expected log hash
d9a90b5e7311041bf4315991ca7f2fbceee461daa2ae70a8b8b95323461a31cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787140356347","kind":"published-quote","locale":"en","page":"theme:meteoblue/durability/en","quote":"I love this app.","rating":5,"review_date":"2024-10-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteoblue.droid","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e61c2598d4d0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.