Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“bin seit Jahren dabei”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
e711332ff38b9ba097919dccdb2577e287ad8cd9759e49e1b08ec68238950213
Signature (Ed25519, base64)
GrGrifoZzpOPe48mcvi62D6pWP71e2PQrheFkoARyH7cdd1XyEY9mRzfSR9X0baIOFg+t/NGySQGG+2VNeFxAg==
Merkle root
afb9ffbb4b4e88017e1c868247f919ebcfe69f09127d391e7daa08019eb2b63b
Merkle path
["e714fbf09e0d2a23c3c505ed3527cf96ec149fe6aa868204f280c1268a05002a","e547f463e24a90090d0193d85e80a46f74260410b4e203cef5335f3ceef53d8e","0fd84f466dfe27ad2c3cc0d161eed97aee3128587526b490a2fa453a50b0027b","c977c294693785780db70141c014a7abfa61eec3d4f56db25b999fe5ef4b7874","10d9c39dd88bc300f9e3186bed469f3f50fc84c339c9d758dbdc2839d2bf5611","11e3339f5dc80d2405ef8daa922bade617f6b7944c7f0740d7501020f019c133","dad4a04ef63edfbdf550935591b65a46384da13f6dd902e38e9808e4729c5428","3e22fdf5b3bdaa2a2bd954995b8c716a7eb8d5c58ab4ec385b9ede5e536a5901","f8ea20261d3c2dd6bff74b8b6e04b7f35fd95a392cefe7d511bb7dcfa1bb2ba2","3b45e0061372ff527cb562dc87b57054551fb2f464a4096ec94c1b554e12ffe5","4bfc70739145bb78d678c56675dafb9d532e1845ab6c25da2a8d2c53820116ef","75896977a88025283cfad43d9313e7e4c99a59b8b2f20b485a136bba5c45ff39","27628b11fcf7ded1e46c91a94184a9aee79e58bf13ca8182b43edf02fdf3b782","5c5f731502958b375bc1d9a553448dbbddc644c5b57d6bfb1c2392c3f578da0d","72bbc4ee0a973113b1d556f76d02fea2c4704794a0d313a96e49ff7b6174dec2"]
Anchored
2026-10-10
Public log entry
search.sigstore.dev, log index 3178115911 · entry 108e9186e8c5677a2bba…
Expected log hash
a144ffc32dfaa9fe45b4895b7f4c17280667152868dd8de227ca2811c60c870f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791604579182","kind":"published-quote","locale":"de","page":"brand:atupri","quote":"bin seit Jahren dabei","rating":5,"review_date":"2024-11-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (afb9ffbb4b4e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.