Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“sans inscription, impossible d'utiliser l'app”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
fdac72efc8ca4e55619add3703ff88e0f5f7f47531d4015f048e12d3071c85f1
Signature (Ed25519, base64)
TCZPnRcGCuKkBciqPT0MZ4ztJvZ1LbWdD0TktUsjgNLrFtKjxFl1KBr+LZK8eLevFm8Ych0fRaC7CusDWEYRAg==
Merkle root
ccae92ceb3dcfba104788424188fa34a8cb1410075ff6c1a21fa513e89f0c4fe
Merkle path
["fdad4f87bac67620152f0ff0561f4fd464af67e36cab554c9a33247bcc5a0d2e","b50e86b637b377117e86d5ac09f5ed0146219328b3448bf152c2e942f078b1a0","4c37d1b57c680a3c934eb75a2db2f783b656b06b6f4b2b15eea5cacbc274a05e","5769e073321781545be1f282e40e5293a25490797c9e64c11f97fdf35dd37a2d","b2e6105f24eab3639d258cb4fd00b19e50156508f4b42a8a8d558c05be63a4d7","f3d014c88eb446d57439e5fe56fe9cbf075291ad234821b4e59791181beaf9b0","f7d23687a5c68192a267a2d99f711c9e674dce1b67a83aeae11404157d8aaa85","f0aedcebecb554264d093cb159cb2b5665de31cdb1ce8159db8d5564ad383094","e80672f2c3c875bb82683fd5873f07b2ef9fb704d50c7c0755d5444cd9054f3a","56a71614b25272fd16b60145692ab7c920f317a986a8ee29008372426b594fe3","82d3647695251b0bf39fa76d3bcd41586fac3c92b9b6268eb7d59a505cd6418c","4e82d1ad9dcfa0d3ace9851421e159f426bbe608eea35676f6b709bd111096e2","2c6aae0c21fcb52f32358e37c05f651b94e474293ca87a7bb6333f77cf7ec65d"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515282333 · entry 108e9186e8c5677a6652…
Expected log hash
af455e73500113c158c8df9793eab703ff863c9c98fe38560752c9a1772810a8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787139531268","kind":"published-quote","locale":"fr","page":"brand:fliphtml5","quote":"sans inscription, impossible d'utiliser l'app","rating":1,"review_date":"2025-10-14","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id1071744833?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ccae92ceb3dc…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.