Hi jimmy,
A VPN label (each PE generates the VPN Label for its local VPN routes and propagate them via MBGP to other PE routers) is the second label in stack if we are talking about MPLS VPN, the TOP label is for the Egress PE router (Propagated via LDP), any packet that need to be forwarded between the customer VPN sites needs to be tagged via the whole stack (Top label + VPN label).
HTH, please rate if it does,
Mohammed Mahmoud.