Reference

pki---gen(1) on Linux

The text dd60dbd899b6, as Debian 11 (Bullseye) shipped it.

Generate a new RSA or ECDSA private key

Flags it lists

pki---gen(1) on Linux now