---
title: "oz0 receipt verify"
description: "Check that a receipt is the one management signed: the ed25519 signature over the document (every field, in its order), under the audit key it names, and the document's shape."
canonical_url: "https://docs.oz0.ai/reference/cli/oz0/receipt/verify"
---
# oz0 receipt verify

> Check that a receipt is the one management signed: the ed25519 signature over the document (every field, in its order), under the audit key it names, and the document's shape.

For: Operators and developers looking up a command.

Check that a receipt is the one management signed: the ed25519 signature over the document (every field, in its order), under the audit key it names, and the document's shape. A FILE (from `oz0 receipt show --out`) is checked without the cluster and without the network; an ID is fetched first and checked the same way. Pin the audit key with --key: its fingerprint as `oz0 audit key` prints it, given to you by another channel than the receipt.

Without it the receipt's own key is trusted, and the command says so.

Exit status: 0 when it verifies, 1 when it does not, 2 when it cannot be read.

## Usage

```bash
oz0 receipt verify FILE|ID [flags]
```

## Flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --json
      </code>
    </td>
    
    <td>
      bool
    </td>
    
    <td>
      
    </td>
    
    <td>
      print the result as JSON
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --key
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      
    </td>
    
    <td>
      the audit key's fingerprint (or public key) to pin, as oz0 audit key prints it
    </td>
  </tr>
</tbody>
</table>

## Inherited flags

<table>
<thead>
  <tr>
    <th>
      Flag
    </th>
    
    <th>
      Type
    </th>
    
    <th>
      Default
    </th>
    
    <th>
      Description
    </th>
  </tr>
</thead>

<tbody>
  <tr>
    <td>
      <code>
        --context
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        $OZ0_CONTEXT or &lt;config dir>/orchestrator-zero/context.json
      </code>
    </td>
    
    <td>
      CLI context file written by server init
    </td>
  </tr>
  
  <tr>
    <td>
      <code>
        --log-level
      </code>
    </td>
    
    <td>
      string
    </td>
    
    <td>
      <code>
        info
      </code>
    </td>
    
    <td>
      log level: debug, info, warn or error
    </td>
  </tr>
</tbody>
</table>

See [all `oz0` commands](https://docs.oz0.ai/reference/cli/oz0) and the [global flags](https://docs.oz0.ai/reference/cli/oz0#global-flags).


## Sitemap

See the full [sitemap](https://docs.oz0.ai/sitemap.md) for all pages.