ssh-keygen -t rsa
note: enter a different name if don't want overwrite existing one
ssh-keygen -p -f ~/.ssh/id_rsa
note: insert old password, then hit enter twice to remove
ssh-keygen -p -f ~/.ssh/id_rsa
ssh-keygen -l -E sha256 -f /etc/ssh/ssh_host_ecdsa_key.pub