Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“looking forward to more functionality the desktop version has”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514654467

Proof data

Record hash (SHA-256)

ff75f849c1ad6c71f90fe480c8130a19f59343a88b9bd17271a861b720abf5c0

Signature (Ed25519, base64)

b58+SRcYgFqwInyhRO0aT5ertF4K00b3ZFEBsRwqqQrXijIIiJzda4If4v+mLqpbg1wt2WuPChmgwxYcDWTkBw==

Merkle root

2030d4ef17fc68fad1320305cf569e85a00baea931fba0d3ebe628cf9c90c35f

Merkle path

["ff764a74b4765371bc46f39832fb46326cb902d863b1db5de73940bcdc21530d","384bffd3f7de879754f5735884195408d45ade2a2e6b2c5a920bcba30c503ba8","185f8f2c876e3b207f56156327b6569c4005c65063a4bdfc78f94bf80129df10","be35292fe11714a7efe412528bd74599991bca6f57501add0ee74004d81f8364","1bde889b90185c2cc5730da38e0063921583b1f55dc71ed80eef636f0798939e","bfe8d0b28515f573076bc2f0817ed32caed794deb5e8c190e68a7c0a073590d0","d3e144191844b96d22234ddd69e8f9e15e2c67a55ddb6f1c88a4dc09e10f14e1","cca51b4931733f33b3658828d740a30b3bcbbf8ed6fc4b0c01d2f34500c39ef9","5960eebfec479933c26b91a44b12a8dcd102297ae33da08e338bad0bb1d869ed","ba7d688cf7aa2553a6d16d39a57c173aa2a889c551139b3c5683169b12be5b7d","ac47b10da702a9479bd116280fe3e40eddfcf168ceacbd9cb725f508893ed250","20ea0d6aeaab7028adab5147f39d1ebf52355cf181354f5c166cdff8fc496c2e"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514654467 · entry 108e9186e8c5677a9253…

Expected log hash

ddd8d6dfa3771a4106292f7bec674337dc9649465b28b118bb17bfc2b8ff0a67 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787132872903","kind":"published-quote","locale":"de","page":"brand:flippingbook","quote":"looking forward to more functionality the desktop version has","rating":5,"review_date":"2024-09-11","source":"Apple App Store","source_url":"https://apps.apple.com/tr/app/id1608881415?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2030d4ef17fc…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.