Quote verification
This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.
“Die App macht was sie soll”
Checks (re-run on this request)
- ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
- ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
- ✓ Public transparency log — Sigstore Rekor log index 2543383844
Proof data
- Record hash (SHA-256)
fd78419904842a55353b91d324fe7dbdadadb3de1c4a1679cf51e12d4cdb7f76- Signature (Ed25519, base64)
+vcUCPMq3ZbmtJOlfUhwd/MfArG5hlSjdFbzb/OJizju4MbJVYw020bhqsDkfvffs+jWi/SJxh4JlIu7t4+DCw==- Merkle root
7252afe559009950531df937e7edc9bd1c57cf28a24ed7f6c6613b65f459eae4- Merkle path
["fd7b97dac90ff75d349d8e48c67015562fb97cbb1a9f01a31802d9d7a7714e9b","f8df4626d577144d3e97bc6a3c34d2169c2f5472c92c945ef343401076ed4703","69308859a0f1db19f772b5efeee22efcddb45a92f16d5398442ddc15a094e5ee","5e424180473e1dc709425330c57e706de09c9f29b2589d0727974200661d6bbe","9da487325b9ef7442bdd2a1c5fe1afdcb63ffc1c5a4d05ddca118953614e163f","f82c308b3788a4d35fbc6c1da18b8a3688f20e5ddda7140e2300d0d6f1d28a4a","9537d8da12a6ca321518a3653baff342548a3da3ba10311120804d1c4277991b","d4144801af25a3a9308f0097a4997237a087d417817e83bb124f7ebef1e8ca14","e56e248953d63117b19dbb3d9e80d0eac63973502227d8e33f6252c2fa933e52","cc16e5787a9e78c1daa6e0adfdfa8f418aaba2780f17970e3c493bcd54d07beb","0cb2be899eb0e87e0c84c8010f32540c0ff4f02ee38f8970424d4e3f7d0d393c","e3ea462a17033cf2b2bb196bc5b07383fce456bc3220c1b5de266e7e78fd5dc1"]- Anchored
- 2026-08-21
- Public log entry
-
search.sigstore.dev, log index 2543383844 · entry
108e9186e8c5677a6025… - Expected log hash
-
65212d488cd7bdd0d67aebdd70bfc57f4b622fa08b8179427635d69eb7ec385bThe log entry'sspec.data.hash.valuemust equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm. - Canonical record
{"dataset_version":"v1787285599851","kind":"published-quote","locale":"de","page":"brand:css","quote":"Die App macht was sie soll","rating":5,"review_date":"2026-07-31","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1133551270?see-all=reviews","v":1}
Verify in the public log
- Open the Rekor entry (pre-filled with this proof's log index).
-
In the entry, compare
spec.data.hash.valuewith the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7252afe55900…), which ties this proof's root to the log entry. -
Decode
spec.signature.publicKey.contentfrom base64: it must equal Citatio's published key at /.well-known/citatio-signing.json. -
The entry's
integratedTimeis the independent timestamp: the root, and with it this quote, existed no later than that moment. - Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.