You can use rxTools 3, it supports direct Ticket.db dumping(on old and new 3DS). Also you could use xorpatterns from decryt9 or rxtools 3 and get it manualy.
I believe this is the Github page for Decrypt9. https://github.com/archshift/Decrypt9rxtools 3, when did that get released. it would be nice if you can link me to were I can find info on decryt9 if you can.