IPSW File Format

IPSW (iPod¹ SoftWare) or (iPhone SoftWare) Files have the Magic Number 504B0304 (PK\003\004) and thus are ZIP archives. They can be modified with typical zip/unzip tools (i.e. change extension to .zip and double click). IPSWs are used to deliver theApple TV/iPad/iPhone/iPod touch firmware to the end-user.

¹IPSW files have been used since the very first iPod, though they have a different format than iOS-based devices.

IPSW Contents

• Restore Ramdisk
• Update Ramdisk (Some firmwares don't contain this because of various reasons- Error 3002 means you are trying to update with an IPSW that is missing this)
• Filesystem Ramdisk (the largest .dmg file)
• Device Tree
• kernelcache.release.XXXXXXX file (application processor specific i.e S5L8900, S5L8920, S5L8720, S5L8922, S5L8930, S5L8940)
• BuildManifest.plist (first appeared in firmware 3.0?)
• Restore.plist file
• Firmware\
  • all_flash\
    • all_flash.XXXXX.production\ (hardware specific i.e. M68ap, N82ap, etc.)
      • IMG2/IMG3 files
      • manifest
  • \dfu (Folder)
    • iBEC.XXXXX.DFU (hardware specific i.e. M68ap, N82ap, etc.)
    • iBSS.XXXXX.DFU (hardware specific i.e. M68ap, N82ap, etc.)
    • WTF.XXXXX.DFU (hardware specific i.e. M68ap, N82ap, N45ap, N72ap - currently not present in firmwares for the iPhone 3GS and later, because it is mostly used to patch issues with the DFU mode that was burned into the bootrom)
  • ICE3_XX.XX.XX_BOOT_02.06.Release.bbfw (Contains the baseband and the bootloader. X stands for a number. This is the baseband version. 02.06 is the bootloader. Only in the iPhone 4 firmware.)

Example

This is a ls -alR of an extracted iPhone 3GS 3.0 Firmware IPSW.

total 608400
drwx------@ 11 m  staff        374 17 Jun 07:11 .
drwxrwxrwx   5 m  staff        170 18 Jul 07:34 ..
-rw-r--r--@  1 m  admin  281214976 22 Mai 17:10 018-5302-002.dmg
-rw-r--r--@  1 m  admin   12769604 22 Mai 16:59 018-5304-002.dmg
-rw-r--r--@  1 m  admin   12777796 22 Mai 16:59 018-5306-002.dmg
-rw-r--r--   1 m  admin      21097 22 Mai 17:29 BuildManifest.plist
drwxr-xr-x@  5 m  staff        170 17 Jun 07:11 Firmware
-rw-r--r--   1 m  admin       1763 22 Mai 17:10 Restore.plist
-rw-r--r--@  1 m  staff    4695492 22 Mai 14:32 kernelcache.release.s5l8920x

./Firmware:
total 16
drwxr-xr-x@  5 m  staff   170 17 Jun 07:11 .
drwx------@ 11 m  staff   374 17 Jun 07:11 ..
drwxr-xr-x@  4 m  staff   136 18 Jun 02:10 all_flash
drwxr-xr-x@  4 m  staff   136 22 Mai 13:39 dfu

./Firmware/all_flash:
total 16
drwxr-xr-x@  4 m  staff   136 18 Jun 02:10 .
drwxr-xr-x@  5 m  staff   170 17 Jun 07:11 ..
drwxr-xr-x@ 16 m  staff   544 22 Mai 13:43 all_flash.n88ap.production

./Firmware/all_flash/all_flash.n88ap.production:
total 1320
drwxr-xr-x@ 16 m  staff     544 22 Mai 13:43 .
drwxr-xr-x@  4 m  staff     136 18 Jun 02:10 ..
-rw-r--r--@  1 m  staff   44996 22 Mai 13:08 DeviceTree.n88ap.img3
-rw-r--r--@  1 m  staff   67908 22 Mai 13:12 LLB.n88ap.RELEASE.img3
-rw-r--r--@  1 m  staff    9604 22 Mai 13:15 applelogo.s5l8920x.img3
-rw-r--r--@  1 m  staff   19716 22 Mai 13:15 batterycharging0.s5l8920x.img3
-rw-r--r--@  1 m  staff   24900 22 Mai 13:16 batterycharging1.s5l8920x.img3
-rw-r--r--@  1 m  staff   76100 22 Mai 13:16 batteryfull.s5l8920x.img3
-rw-r--r--@  1 m  staff   56772 22 Mai 13:16 batterylow0.s5l8920x.img3
-rw-r--r--@  1 m  staff   65348 22 Mai 13:17 batterylow1.s5l8920x.img3
-rw-r--r--@  1 m  staff   20356 22 Mai 13:17 glyphcharging.s5l8920x.img3
-rw-r--r--@  1 m  staff   19332 22 Mai 13:18 glyphplugin.s5l8920x.img3
-rw-r--r--@  1 m  staff  178500 22 Mai 13:21 iBoot.n88ap.RELEASE.img3
-rw-r--r--@  1 m  staff     341 22 Mai 13:43 manifest
-rw-r--r--@  1 m  staff   20484 22 Mai 13:24 needservice.s5l8920x.img3
-rw-r--r--@  1 m  staff   47876 22 Mai 13:24 recoverymode.s5l8920x.img3

./Firmware/dfu:
total 416
drwxr-xr-x@ 4 m  staff     136 22 Mai 13:39 .
drwxr-xr-x@ 5 m  staff     170 17 Jun 07:11 ..
-rw-r--r--@ 1 m  staff  104772 22 Mai 13:30 iBEC.n88ap.RELEASE.dfu
-rw-r--r--@ 1 m  staff  104772 22 Mai 13:36 iBSS.n88ap.RELEASE.dfu